Chapter 26 AAA
MES3500 Series User’s Guide
210
Login
These fields specify which database the Switch should use (first, second and third) to
authenticate administrator accounts (users for Switch management).
Configure the local user accounts in the
Access Control > Logins
screen. The
and RADIUS are external servers. Before you specify the priority, make sure you have set
up the corresponding database correctly first.
You can specify up to three methods for the Switch to authenticate administrator accounts.
The Switch checks the methods in the order you configure them (first
Method 1
, then
Method 2
and finally
Method 3
). You must configure the settings in the
Method 1
field. If
you want the Switch to check other sources for administrator accounts, specify them in
Method 2
and
Method 3
fields.
Select
local
to have the Switch check the administrator accounts configured in the
Access
Control > Logins
screen.
Select
radius
to have the Switch check the administrator accounts configured via the
RADIUS Server.
Select
to have the Switch check the administrator accounts configured via the
Server
.
Authorization
Use this section to configure authorization settings on the Switch.
Type
Set whether the Switch provides the following services to a user.
•
Exec
: Allow an administrator which logs in the Switch through Telnet or SSH to have
different access privilege level assigned via the external server.
•
Dot1x
: Allow an IEEE 802.1x client to have different bandwidth limit or VLAN ID
assigned via the external server.
Active
Select this to activate authorization for a specified event types.
Method
Select whether you want to use RADIUS or for authorization of specific types of
events.
RADIUS is the only method for IEEE 802.1x authorization.
Accounting
Use this section to configure accounting settings on the Switch.
Update Period
This is the amount of time in minutes before the Switch sends an update to the accounting
server. This is only valid if you select the
start-stop
option for the
Exec
or
Dot1x
entries.
Type
The Switch supports the following types of events to be sent to the accounting server(s):
•
System
- Configure the Switch to send information when the following system events
occur: system boots up, system shuts down, system accounting is enabled, system
accounting is disabled
•
Exec
- Configure the Switch to send information when an administrator logs in and logs
out via the console port, telnet or SSH.
•
Dot1x
- Configure the Switch to send information when an IEEE 802.1x client begins a
session (authenticates via the Switch), ends a session as well as interim updates of a
session.
•
Commands
- Configure the Switch to send information when commands of specified
privilege level and higher are executed on the Switch.
Active
Select this to activate accounting for a specified event types.
Broadcast
Select this to have the Switch send accounting information to all configured accounting
servers at the same time.
If you don’t select this and you have two accounting servers set up, then the Switch sends
information to the first accounting server and if it doesn’t get a response from the
accounting server then it tries the second accounting server.
Table 81
Advanced Application > AAA > AAA Setup (continued)
LABEL
DESCRIPTION
Содержание MES3500 Series
Страница 16: ...Table of Contents MES3500 Series User s Guide 16 Appendix C Legal Information 357 Index 362...
Страница 17: ...17 PART I User s Guide...
Страница 72: ...72 PART II Technical Reference...
Страница 106: ...Chapter 9 VLAN MES3500 Series User s Guide 106 Figure 49 Advanced Application VLAN Port Based VLAN Setup Port Isolation...
Страница 178: ...Chapter 22 Policy Rule MES3500 Series User s Guide 178 Figure 98 Policy Example EXAMPLE...
Страница 360: ...Appendix C Legal Information MES3500 Series User s Guide 360 Environmental Product Declaration...
