ZyXEL Communications OLT2406, Руководство пользователя

Страница: 214 / 766

OLT2406 User’s Guide
214
C
HAPTER
26
AAA
26.1 AAA Overview
This chapter describes how to configure authentication, authorization and accounting settings on the
OLT.
The external servers that perform authentication, authorization and accounting functions are known as
AAA servers. The OLT supports RADIUS (Remote Authentication Dial-In User Service, see
RADIUS and
on page 215 ) as the external authentication and authorization server.
Figure 128 AAA Server
26.1.1 What You Can Do
• Use the AAA screen ( Section 26.2 on page 215 ) to display the links to the screens where you can
enable authentication and authorization or both of them on the OLT.
• use the RADIUS Server Setup screen ( Section 26.3 on page 215 ) to configure your RADIUS server
settings.
• Use the Server Setup screen ( Section 26.4 on page 217 ) to configure your
authentication settings.
• Use the AAA Setup screen ( Section 26.5 on page 218 ) to configure authentication, authorization and
accounting settings, such as the methods used to authenticate users accessing the OLT and which
database the OLT should use first.
26.1.2 What You Need to Know
Authentication is the process of determining who a user is and validating access to the OLT. The OLT can
authenticate users who try to log in based on user accounts configured on the OLT itself. The OLT can
also use an external authentication server to authenticate a large number of users.
Authorization is the process of determining what a user is allowed to do. Different user accounts may
have higher or lower privilege levels associated with them. For example, user A may have the right to
create new login accounts on the OLT but user B cannot. The OLT can authorize users based on user
accounts configured on the OLT itself or it can use an external server to authorize a large number of
users.
Accounting is the process of recording what a user is doing. The OLT can use an external server to track
when users log in, log out, and so on. Accounting can also record system related actions such as boot
up and shut down times of the OLT.