Interlogix NS3503-16P-4C, Руководство пользователя, Страница: 203 / 316

201
NS3503-16P-4C User Manual
Key Display the current key
Timeout Display the current timeout
Retries Display the current retry times
Priority Display the current priority
Modify Click to edit login authentication list parameter
Click to delete login authentication list entry
4.9.4 AAA
Authentication, authorization, and accounting (AAA) provides a framework for configuring access
control on the Managed Switch. The three security functions can be summarized as follows:

Authentication — Identifies users that request access to the network.

Authorization — Determines if users can access specific services.

Accounting — Provides reports, auditing, and billing for services that users have accessed on the
network.
The AAA functions require the use of configured RADIUS or servers in the network. The
security servers can be defined as sequential groups that are then applied as a method for controlling
user access to specified services. For example, when the switch attempts to authenticate a user, a
request is sent to the first server in the defined group, if there is no response the second server will be
tried, and so on. If at any point a pass or fail is returned, the process stops.
The Managed Switch supports the following AAA features:

Accounting for IEEE 802.1X authenticated users that access the network through the Managed
Switch.

Accounting for users that access management interfaces on the Managed Switch through the
console and Telnet.

Accounting for commands that users enter at specific CLI privilege levels. Authorization of users
that access management interfaces on the Managed Switch through the console and Telnet.
To configure AAA on the Managed Switch:
1. Configure RADIUS and server access parameters. See “ Configuring Local/Remote
Logon Authentication ”.
2. Define RADIUS and server groups to support the accounting and authorization of
services.
3. Define a method name for each service to which you want to apply accounting or authorization and
specify the RADIUS or server groups to use. Apply the method names to port or line
interfaces.
Note : This guide assumes that RADIUS and servers have already been configured to
support AAA. The configuration of RADIUS and server software is beyond the scope of
this guide, refer to the documentation provided with the RADIUS or server software.