Table of Contents
Advertisement
• Access Profile -- User-defined Access Profile lists. The Access Profile list contains a default value of Console
List, to which user-defined access profiles are added. Selecting Console Only as the Access Profile name
disconnects the session, and enables accessing the device from the console only.
• Current Active Access Profile -- The access profile that is currently active.
• Set Access Profile Active -- Activates an access profile.
• Remove -- Removes an access profile from the Access Profile Name list, when selected.
• Access Profile Name (1-32 Characters) -- User-defined name for the access profile.
• Rule Priority (1-65535) -- The rule priority. When the packet is matched to a rule, user groups are either
granted or denied device management access. The rule order is set by defining a rule number within the
Profile Rules Table. The rule number is essential to matching packets to rules, as packets are matched on a
first-fit basis. The rule priorities are assigned in the Profile Rules Table.
• Management Method -- The management method for which the access profile is defined. Users with this
access profile can access the device using the management method selected.
• Interface -- The interface type to which the rule applies. This is an optional field. This rule can be applied to a
selected port, LAG, or VLAN by selecting the check box and selecting the appropriate option button and
interface.
• Source IP Address -- The interface source IP address for which the rule applies. This is an optional field and
indicates that the rule is valid for a subnetwork.
• Network Mask -- The IP subnetwork mask.
• Prefix Length -- The number of bits that comprise the source IP address prefix, or the network mask of the
source IP address.
• Action -- Defines whether to permit or deny management access to the defined interface.
?
Assigning an access profile to an interface denies acce ss via other interfaces. If an access profile is
Note
:
not assigned to any interface, the device can be accessed by all interfaces.
Authentication Profile
The Authentication Profiles page contains fields for selecting the user authentication method on the device. User
authentication occurs:
• Locally
• Via an external server
User authentication can also be set to None.
User authentication occurs in the order the methods are selected. For example, if both the Local and RADIUS options are
selected, the user is authenticated first locally. If the local user database is empty, the user is then authenticated via the
RADIUS server.
If an error occurs during the authentication, the next selected method is used.
To open Authentication Profile screen perform the folling:
1.
Click System -> Management Security -> Authentication Profile
2.
The Authentication Profile screen is displayed as in Figure 3-34.
36
Advertisement
Table of Contents
