MRV Communications EM316LNXNM-OT, Руководство пользователя

Страница: 86 / 181

EM316LNXNM-OT Authentication, Authorization, and
Accounting
PN 1275005-100 Rev E6 79
Chapter 10. Authentication,
Authorization, and Accounting
...users, groups, and policies to secure network administration
Authentication, Authorization, and Accounting (AAA) in a Media Cross Connect includes two server
options:
•
• Radius
The commands and
Radius
control each server type, respetively. Each of these server
commands uses the same command line options. The commands and options to secure the Fiber Driver
system are described in this section.
Authentication maintains user credentials to access the system. Each user must provide a user name and
password. When the remote server authenticates the credentials, the user can access the system.
Authorization maintains specific access rights to the system for each user. The remote server provides the
class level to the system. The class level can be VIEW, NORMAL, or SUPER for each user account. The
user class provides general access to features associated with the assigned level. Specific elements access
rights may be set only on the local system level.
On the local system level, port authorization works in two ways: If the user is specified locally, that user's
group assignments are transferred to the remote user for element access. If user is not specified locally,
element access is set to a special user named "remote" that transfers its group assignments to the remote
user. If neither the accessing user nor the special "remote" user are not present on the system, then the
user receives no group assignments.
Accounting is a series of records sent from the system to the remote server to keep track of activities on
the system. The system records only when users receive access into the system and when they log out
of the system.
General Notes
The system allows up to five ordered servers to be contacted. If the first server does not respond or denies
access, then the second, third, fourth, and fifth servers are contacted in order until a server permits access.
If no server responds, AAA duties return to the local Fiber Driver EM316LNXNM-OT.
Authentication and accounting are independent processes in the system. Either process may be activated
without the other.