LevelOne GEL-2670, Руководство пользователя, Страница: 67 / 320

C
HAPTER
4
| Configuring the Switch
Configuring Security
– 67 –
N
OTE
:
This guide assumes that RADIUS and servers have already
been configured to support AAA. The configuration of RADIUS and
server software is beyond the scope of this guide. Refer to the
documentation provided with the RADIUS and server software.
P
ARAMETERS
These parameters are displayed:
◆
Client – Specifies how the administrator is authenticated when logging
into the switch via Telnet, SSH, or a web browser.
◆
Authentication Method – Selects the authentication method.
(Options: None, Local, RADIUS, ; Default: Local)
Selecting the option “None” disables access through the specified
management interface.
◆
Fallback – Uses the local user database for authentication if none of
the configured authentication servers are alive. This is only possible if
the Authentication Method is set to something else than “none” or
“local.”
W
EB
I
NTERFACE
To configure authentication for management access:
1.
Click Advanced Configuration, Security, Switch, Auth Method.
2.
Configure the authentication method for management client types, and
specify whether or not to fallback to local authentication if no remote
authentication server is available.
3.
Click Save.
Figure 15: Authentication Method for Management Access
C
ONFIGURING
SSH
Use the SSH Configuration page to configure access to the Secure Shell
(SSH) management interface. SSH provides remote management access to
this switch as a secure replacement for Telnet. When the client contacts the
switch via the SSH protocol, the switch generates a public-key that the
client uses along with a local user name and password for access
authentication. SSH also encrypts all data transfers passing between the
switch and SSH-enabled management station clients, and ensures that
data traveling over the network arrives unaltered.