Switch User Accounts; Radius Attributes For Ibm N/Os User Privileges - IBM RackSwitch G8000 Application Manual

Switch User Accounts

User Account
User
Operator
Administrator

RADIUS Attributes for IBM N/OS User Privileges

© Copyright IBM Corp. 2011
• Supports user-configurable RADIUS application port. The default is
1812/UDP-based on RFC 2138. Port 1645 is also supported.
• Supports user-configurable RADIUS application port. The default is UDP port
1645. UDP port 1812, based on RFC 2138, is also supported.
• Allows network administrator to define privileges for one or more specific users to
access the switch at the RADIUS user database.
The user accounts listed in
file.
Table 3. User Access Levels
Description and Tasks Performed
The User has no direct responsibility for switch
management. They can view all switch status
information and statistics but cannot make any
configuration changes to the switch.
The Operator manages all functions of the switch.
The Operator can reset ports.
The super-user Administrator has complete access to
all commands, information, and configuration
commands on the switch, including the ability to
change both the user and administrator passwords.
When the user logs in, the switch authenticates his/her level of access by sending
the RADIUS access request, that is, the client authentication request, to the
RADIUS authentication server.
If the remote user is successfully authenticated by the authentication server, the
switch will verify the privileges of the remote user and authorize the appropriate
access. The administrator has an option to allow secure backdoor access via
Telnet/SSH/BBI. Secure backdoor provides switch access when the RADIUS
servers cannot be reached. You always can access the switch via the console port,
by using noradius and the administrator password, whether secure backdoor is
enabled or not.
Note: To obtain the RADIUS backdoor password for your G8000, contact Technical
Support.
Table 3 can be defined in the RADIUS server dictionary
Chapter 5. Authentication & Authorization Protocols
Password
user
oper
admin
65