Configuring Remote Logon Authentication Servers - Edge-Core ECS3510-28T Management Manual

| Security Measures
C 13
HAPTER
AAA Authentication, Authorization and Accounting
C
ONFIGURING
R L
EMOTE OGON
A
UTHENTICATION
S
ERVERS
P
ARAMETERS
These parameters are displayed:
Authentication Sequence – Select the authentication, or
◆
authentication sequence required:
Local – User authentication is performed only locally by the switch.
■
RADIUS – User authentication is performed using a RADIUS server
■
only.
TACACS – User authentication is performed using a TACACS+
■
server only.
[authentication sequence] – User authentication is performed by up
■
to three authentication methods in the indicated sequence.
W I
EB NTERFACE
To configure the method(s) of controlling management access:
Click Security, AAA, System Authentication.
1.
Specify the authentication sequence (i.e., one to three methods).
2.
Click Apply.
3.
Figure 150: Configuring the Authentication Sequence
Use the Security > AAA > Server page to configure the message exchange
parameters for RADIUS or TACACS+ remote access authentication servers.
Remote Authentication Dial-in User Service (RADIUS) and Terminal Access
Controller Access Control System Plus (TACACS+) are logon authentication
protocols that use software running on a central server to control access to
RADIUS-aware or TACACS-aware devices on the network. An
authentication server contains a database of multiple user name/password
pairs with associated privilege levels for each user that requires
management access to the switch.
– 308 –