Switch Security Overview - Alcatel-Lucent OmniSwitch 6850-48 Management Manual

Managing Switch Security

Switch Security Overview

Switch security features increase the security of the basic switch login process by allowing management
only through particular interfaces for users with particular privileges. Login information and privileges
may be stored on the switch and/or an external server, depending on the type of external server you are
using and how you configure switch access.
The illustration here shows the components of switch security:
RADIUS, LDAP , or ACE
Server
Servers supply login infor-
mation about the user. User
privilege information is also
available on RADIUS and
LDAP servers.
An external RADIUS or LDAP server can supply both user login and authorization information. ACE/
Server can provide login information; user authorization information is available through the switch's
local user database. External servers may also be used for accounting, which includes logging statistics
about user sessions. For information about configuring the switch to communicate with external servers,
see the "Managing Authentication Servers" chapter in the OmniSwitch AOS Release 6 Network Configura-
tion Guide.
If an external server is not available or is not configured, user login information and user authorization
may be provided through the local user database on the switch. The user database is described in
Chapter 8, "Managing Switch User Accounts."
Logging may also be accomplished directly on the switch. For information about configuring local
logging for switch access, see
about local logging, see the "Using Switch Logging" chapter in the OmniSwitch AOS Release 6 Network
Configuration Guide.
OmniSwitch AOS Release 6 Switch Management Guide
login request
Authenticated Switch Access Setup
"Configuring Accounting for ASA" on page
September 2009
Switch Security Overview
End User
management interface
local user
database
OmniSwitch
9-12. For complete details
page 9-3