Table of Contents
Advertisement
65.1 Authentication, Authorization and Accounting (AAA)
This chapter describes how to configure authentication, authorization and accounting settings on the
Switch.
The external servers that perform authentication, authorization and accounting functions are known as
AAA servers. The Switch supports RADIUS (Remote Authentication Dial-In User Service) and TACACS+
(Terminal Access Controller Access-Control System Plus) as the external authentication, authorization,
and accounting server.
Figure 323 AAA Server
65.1.1 What You Can Do
• use the RADIUS Server Setup screen
settings.
• Use the TACACS+ Server Setup screen
authentication settings.
• Use the AAA Setup screen
accounting settings, such as the methods used to authenticate users accessing the Switch and which
database the Switch should use first.
65.1.2 What You Need to Know
Authentication is the process of determining who a user is and validating access to the Switch. The
Switch can authenticate users who try to log in based on user accounts configured on the Switch itself.
The Switch can also use an external authentication server to authenticate a large number of users.
Authorization is the process of determining what a user is allowed to do. Different user accounts may
have higher or lower privilege levels associated with them. For example, user A may have the right to
create new login accounts on the Switch but user B cannot. The Switch can authorize users based on
user accounts configured on the Switch itself or it can use an external server to authorize a large number
of users.
Accounting is the process of recording what a user is doing. The Switch can use an external server to
Chapter 65 AAA
(Section 65.2 on page
(Section 65.3 on page
(Section 65.4 on page
451) to configure authentication, authorization and
XMG1930 Series User's Guide
446
C
H A P T E R
447) to configure your RADIUS server
449) to configure your TACACS+
65
AAA
Advertisement
Table of Contents
Troubleshooting
