Configuring Authenticated Switch Access - Alcatel-Lucent OmniSwitch AOS Release 6 Manual

Configuring Authenticated Switch Access

Configuring Authenticated Switch Access
Setting up Authenticated Switch Access involves the following general steps:
1
Set Up the Authentication Servers. This procedure is described briefly in this chapter. See the
"Managing Authentication Servers" chapter of the OmniSwitch AOS Release 6 Network Configuration
Guide for complete details.
2
Set Up the Local User Database. Set up user information on the switch if user login or privilege infor-
mation will be pulled from the switch. See
3
Set Up the Management Interfaces. This procedure is described in
faces for ASA" on page
4
Set Up Accounting. This step is optional and is described in
page 11-12.
Additional configuration is required in order to set up the switch to communicate with external authentica-
tion servers. This configuration is briefly mentioned in this chapter and described in detail in the "Manag-
ing Authentication Servers" chapter of the OmniSwitch AOS Release 6 Network Configuration Guide.
If you are using the local switch database to authenticate users, user accounts must be set up on the switch.
Procedures for creating user accounts are described in this chapter. See
User Accounts."
Note that by default:
•
Authenticated switch access is available only through the console port.
•
Users are authenticated through the console port via the local user database on the switch.
These defaults provide "out-of-the-box" security at initial startup. Other management interfaces (Telnet,
HTTP, etc.) must be specifically enabled before they can access the switch.
A summary of the commands used for configuring ASA is given in the following table:
Commands
user
aaa radius-server
aaa tacacs+-server
aaa authentication
aaa accounting session
page 11-6
Chapter 10, "Managing Switch User Accounts."
11-9.
Used for...
Configuring the local user database on the switch.
Setting up the switch to communicate with external RADIUS or LDAP
authentication servers.
Configuring the management interface and specifying the servers and/or
local user database to be used for the interface.
Optional. Specifies servers to be used for accounting.
OmniSwitch AOS Release 6 Switch Management Guide
Managing Switch Security
"Setting Up Management Inter-
"Configuring Accounting for ASA" on
Chapter 10, "Managing Switch
July 2010