Table of Contents
Advertisement
26.1 AAA Overview
This chapter describes how to configure authentication, authorization and accounting settings on the
OLT.
The external servers that perform authentication, authorization and accounting functions are known as
AAA servers. The OLT supports RADIUS (Remote Authentication Dial-In User Service, see
TACACS+ on page
Figure 128 AAA Server
26.1.1 What You Can Do
• Use the AAA screen
enable authentication and authorization or both of them on the OLT.
• use the RADIUS Server Setup screen
settings.
• Use the TACACS+ Server Setup screen
authentication settings.
• Use the AAA Setup screen
accounting settings, such as the methods used to authenticate users accessing the OLT and which
database the OLT should use first.
26.1.2 What You Need to Know
Authentication is the process of determining who a user is and validating access to the OLT. The OLT can
authenticate users who try to log in based on user accounts configured on the OLT itself. The OLT can
also use an external authentication server to authenticate a large number of users.
Authorization is the process of determining what a user is allowed to do. Different user accounts may
have higher or lower privilege levels associated with them. For example, user A may have the right to
create new login accounts on the OLT but user B cannot. The OLT can authorize users based on user
accounts configured on the OLT itself or it can use an external server to authorize a large number of
users.
Accounting is the process of recording what a user is doing. The OLT can use an external server to track
when users log in, log out, and so on. Accounting can also record system related actions such as boot
up and shut down times of the OLT.
215) as the external authentication and authorization server.
(Section 26.2 on page
(Section 26.3 on page
(Section 26.4 on page
(Section 26.5 on page
OLT2406 User's Guide
C
H A P T E R
215) to display the links to the screens where you can
215) to configure your RADIUS server
217) to configure your TACACS+
218) to configure authentication, authorization and
214
26
AAA
RADIUS and
Advertisement
Table of Contents
Troubleshooting
