SMC Networks SMCGS10P-SMART Management Manual page 60

| Configuring the Switch
C 4
HAPTER
Configuring Security
management access via Telnet, SSH, a web browser, or the console
interface.
When using RADIUS or TACACS+ logon authentication, the user name
◆
and password must be configured on the authentication server. The
encryption methods used for the authentication process must also be
configured or negotiated between the authentication server and logon
client. This switch can pass authentication messages between the
server and client that have been encrypted using MD5 (Message-Digest
5), TLS (Transport Layer Security), or TTLS (Tunneled Transport Layer
Security).
This guide assumes that RADIUS and TACACS+ servers have already
N :
OTE
been configured to support AAA. The configuration of RADIUS and
TACACS+ server software is beyond the scope of this guide. Refer to the
documentation provided with the RADIUS and TACACS+ server software.
P
ARAMETERS
These parameters are displayed:
Client – Specifies how the administrator is authenticated when logging
◆
into the switch via Telnet, SSH, a web browser, or the console interface.
Authentication Method – Selects the authentication method.
◆
(Options: None, Local, RADIUS, TACACS+; Default: Local)
Selecting the option "None" disables access through the specified
management interface.
Fallback – Uses the local user database for authentication if none of
◆
the configured authentication servers are alive. This is only possible if
the Authentication Method is set to something else than "none" or
"local."
W I
EB NTERFACE
To configure authentication for management access:
Click Configuration, Security, Switch, Auth Method.
1.
Configure the authentication method for management client types, and
2.
specify whether or not to fallback to local authentication if no remote
authentication server is available.
Click Save.
3.
– 60 –