Interlogix NS3500-28T-4S, Руководство пользователя

Страница: 238 / 363

238

Modify
Click to edit login authentication list parameter.
Click to delete login authentication list entry.
4.9.4 AAA
Authentication, authorization, and accounting (AAA)
provides a framework for configuring access control on the
Managed Switch. The three security functions can be summarized as follows:

Authentication
— Identifies users that request access to the network.

Authorization
— Determines if users can access specific services.

Accounting
— Provides reports, auditing, and billing for services that users have accessed on the network.
The AAA functions require the use of configured RADIUS or servers in the network. The security servers
can be defined as sequential groups that are then applied as a method for controlling user access to specified services.
For example, when the switch attempts to authenticate a user, a request is sent to the first server in the defined group,
if there is no response the second server will be tried, and so on. If at any point a pass or fail is returned, the process
stops.
The Managed Switch supports the following AAA features:

Accounting for
IEEE 802.1X authenticated users
that access the network through the Managed Switch.

Accounting for users that access
management interfaces
on the Managed Switch through the console and
Telnet.

Accounting for
commands
that users enter at specific CLI privilege levels. Authorization of users that access
management interfaces on the Managed Switch through the console and Telnet.
To configure AAA on the Managed Switch, you need to follow this general process:
1. Configure RADIUS and server access parameters. See “
Configuring Local/Remote Logon
Authentication
”.
2. Define RADIUS and server groups to support the accounting and authorization of services.
3. Define a method name for each service to which you want to apply accounting or authorization and specify
the RADIUS or server groups to use. Apply the method names to port or line interfaces.