Three Level User Accounts - D-Link xStack DES-3800 Series User Manual

Three Level User Accounts

When the user logins to the device successfully through TACACS/XTACACS/TACACS+ server or none method, "User"
privilege level is the only level assigned. If the user wants to get "Admin" privilege level, the user must use the Enable Admin
window to promote his privilege level. However when the user logins to the device successfully through the RADIUS server or
through the local method, three kinds of privilege levels can be assigned to the user and the user can not use the Enable Admin
window to promote to "Admin" privilege level.
To assign user privilege by RADIUS server, proper parameters should be configured on the RADIUS Server. Below are the
parameters of a user account:
RADIUS Server
Attribute
Username(1)
Password(2)
Vendor-Specific(26)
The parameters of the Vendor-Specific attribute
Vendor-Specific attribute
Vendor-ID
Vendor-Type
Attribute-Specific filed
If the user has configured the user privilege attribute of the RADIUS server (for example, User A has "Admin" privilege) and the
login is successful, the device will assign the correct privilege level (according to the RADIUS server) to the user. However if the
user does not configure the user privilege attribute and logins successfully, the device will assign "User" privilege to this user.
xStack DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch
Description Usage
Name of the user Required
account
Password of the user Required
account
Used to assign the Required
privilege of the user
account
Description Value
To define the vendor 171 (DLINK)
The definition of the 1 (for user privilege)
this attribute
Used to assign the 3 (User privilege)
privilege of the user
4 (Operator privilege)
account
5 (Admin privilege)
Usage
Required
Required
Required
260