Users; Local Users - Siemens SCALANCE XM-400 Configuration Manual

Configuring with Web Based Management
5.8 The "Security" menu
If during authentication a port is assigned to a VLAN dynamically using the function "RADIUS
VLAN Assignment Allowed" or "Guest VLAN" the options are as follows:
● If the VLAN that is to be assigned has not been created on the device, the authentication
is rejected.
● If the VLAN that is to be assigned has been created on the device:
– The port becomes an untagged member in the assigned VLAN if it was not already.
– The port VID of the port is changed to the ID of the assigned VLAN.
Note
If the port is only to be assigned to one VLAN, you need to adapt the VLAN configuration
manually. As default, all ports are untagged members in "VLAN 1".
If the authentication is canceled, e.g. by link down, the dynamic changes are canceled.
● The port is no longer a member in the assigned VLAN.
● The port VID of the port is reset to the value it had prior to authentication.
Note
If the port VID corresponds to the assigned port VID prior to authentication, the port remains
an untagged member in this VLAN.
Authentication without a change to the VLAN configuration
If during authentication no VLAN is assigned either by the function "RADIUS VLAN Assignment
Allowed" or by "Guest VLAN", the existing VLAN configuration of the port remains unchanged.
5.8.2

Users

5.8.2.1

Local Users

Local users
On this page, you create local users with the corresponding rights.
When you create or delete a local user this change is also made automatically in the table
"External User Accounts". If you want to make change explicitly for the internal or external user
table, use the CLI commands.
Note
The values displayed depend on the rights of the logged-in user.
444
→ This makes it possible for the static configuration of the port in this VLAN to be
overwritten and not restored if the authentication is retracted.
SCALANCE XM-400/XR-500 Web Based Management (WBM)
Configuration Manual, 05/2017, C79000-G8976-C248-12