Configuring Management Access Methods; Access Profile Rules, Filters, And Elements - Cisco 220 Series Smart Plus Administration Manual

Configuring Security

Configuring Management Access Methods

STEP 6
Configuring Management Access Methods
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x
• Usage Type—Select the RADIUS server authentication type. The options
are:
- Login—RADIUS server is used for authenticating users that want to
administer the switch.
- 802. 1 X—RADIUS server is used for authentication in 802. 1 X access
control.
- All—RADIUS server is used for authenticating user that wants to
administer the switch and for authentication in 802. 1 X access control.
Click Apply. The RADIUS server is added, and the Running Configuration is
updated.
Management access authentication configures the authentication methods to be
used to authenticate and authorize users from different management access
methods (see Configuring Management Access Authentication
details). Management access profiles limit management access from specific
sources.
Only users who pass both the active access profile and management access
authentication are given management access to the switch.
This section includes the following topics:
•

Access Profile Rules, Filters, and Elements

• Active Access Profile
• Configuring Access Profiles
• Configuring Profile Rules
Access Profile Rules, Filters, and Elements
Access profiles consist of rules for allowing access to the switch. Each access
profile can consist of one or more rules. The rules are executed in order of their
priority within the access profile (top to bottom).
Rules are composed of filters that include the following elements:
16
for more
186