Switch Security Overview - Alcatel-Lucent OmniSwitch 6450 Management Manual

Managing Switch Security

Switch Security Overview

Switch security features increase the security of the basic switch login process by allowing management
only through particular interfaces for users with particular privileges. Login information and privileges can
be stored on the switch and/or an external server, depending on the type of external server you are using
and how you configure switch access.
The illustration here shows the components of switch security:
RADIUS, LDAP, or ACE
Server
Servers supply login infor-
mation about the user. User
privilege information is also
available on RADIUS and
LDAP servers.
An external RADIUS or LDAP server can supply both user login and authorization information. ACE/
Server can provide login information; user authorization information is available through the switch's
local user database. External servers can also be used for accounting, which includes logging statistics
about user sessions. For information about configuring the switch to communicate with external servers,
see the "Managing Authentication Servers" chapter in the OmniSwitch 6250/6450 Network Configuration
Guide.
If an external server is not available or is not configured, user login information and user authorization can
be provided through the local user database on the switch. The user database is described in
"Managing Switch User Accounts."
Logging can also be accomplished directly on the switch. For information about configuring local logging
for switch access, see
logging, see the "Using Switch Logging" chapter in the OmniSwitch 6250/6450 Network Configuration
Guide.
OmniSwitch 6250/6450 Switch Management Guide
Authenticated Switch Access Setup
"Configuring Accounting for ASA" on page
June 2013
End User
login request
management interface
local user
database
OmniSwitch
10-12. For complete details about local
Switch Security Overview
Chapter 9,
page 10-3