FibroLAN Falcon-RX/812/G/A User Manual page 99

Falcon R-Class | User Guide
Table 4-62: Authentication Method Configurations Parameters
Authentication Method Configuration
Client The management client for which the configuration below applies.
Authentication Authentication Method can be set to one of the following values:
•
Methods
•
•
•
Methods that involve remote servers are timed out if the remote servers are offline. In this case
the next method is tried. Each method is tried from left to right and continues until a method
either approves or rejects a user. If a remote server is used for primary authentication it is
recommended to configure secondary authentication as 'local'. This will enable the management
client to login via the local user database if none of the configured authentication servers are
alive.
Command Authorization Method Configuration
The command authorization section allows you to limit the CLI commands available to a user.
Client The management client for which the configuration below applies.
Method Method can be set to one of the following values:
•
•
Cmd Lvl Authorize all commands with a privilege level higher than or equal to this
level. Valid values are in the range of 0 to 15.
Cfg Cmd Also authorize configuration commands.
Accounting Method Configuration
Client The management client for which the configuration below applies.
Method Method can be set to one of the following values:
•
•
Cmd Lvi Enable accounting of all commands with a privilege level higher than or
equal to this level. Valid values are in the range 0 to 15. Leave the field
empty to disable command accounting.
Exec Enable exec (login) accounting.
4.8.1.4 SSH Configuration
SSH is an acronym for Secure Shell. It is a network protocol that allows data to be exchanged using a
secure channel between two networked devices. The encryption used by SSH provides confidentiality
99
No: authentication is disabled, and login is not possible.
local: use the local user database on the switch for authentication.
radius: use a remote RADIUS server for authentication.
tacacs+: use a remote TACACS+server for authentication
no: Command authorization is disabled. User is granted access to CLI
commands according to his privilege level.
tacacs: Use remote TACACS+ server(s) for command authorization. If
all remote servers are offline, the user is granted access to CLI
commands according to his privilege level.
no: Accounting is disabled.
tacacs: Use remote TACACS+ server(s) accounting.