Alcatel OmniSwitch/Router Betriebsanweisung PDF herunterladen (Seite 275)

Managing Switch Security Authenticated Switch Access

OmniSwitch 6250/6450 Switch Management Guide May 2012 page 10-5

The following illustration shows the two different user types attempting to authenticate with an ACE/

Server:

Note. A RADIUS server supporting the challenge and response mechanism as defined in RADIUS

RFC 2865 can access an ACE/Server for authentication purposes. The ACE/Server is then used for user

authentication, and the RADIUS server is used for user authorization.

Interaction With the User Database

By default, switch management users can be authenticated through the console port via the local user data-

base. If external servers are configured for other management interfaces (such as Telnet, or HTTP), but the

servers become unavailable, the switch will poll the local user database for login information.

Access to the console port provides secure failover in case of misconfiguration or if external authentica-

tion servers become unavailable. The admin user is always authorized through the console port via the

local database (provided the correct password is supplied), even if access to the console port is disabled.

The database includes information about whether or not a user is able to log into the switch and which

kinds of privileges or rights the user has for managing the switch. The database can be set up by the

admin user or any user with write privileges to the AAA commands.

See Chapter 9, “Managing Switch User Accounts,” for more information about setting up the user data-

base.

ASA and Authenticated VLANs

Layer 2 Authentication uses Authenticated VLANs to authenticate users through the switch out to a

subnet. Authenticated Switch Access authenticates users into the switch to manage it. The features are

independent of each other; however, user databases for each feature can be located on the same authentica-

tion server.

For more information on authenticated VLANs, and authentication servers, see “Configuring Authenti-

cated VLANs” and “Configuring Authentication Servers” in the

OmniSwitch 6250/6450 Network Configuration Guide.

The switch polls the server

for login information; end-

user profiles are stored on

the switch.

ACE/Server

OmniSwitch

The switch polls the server

for login information; privi-

leges are stored on the

switch.

ACE/Server

Authentication-Only Server (ACE/Server)

Customer

OmniSwitch

Network Administrator

user

privilege

end-user

profiles

1 2 ... 270 271 272 273 274 275 276 277 278 279 280 ... 345 346

Kommentare zu diesen Handbüchern

Keine Kommentare

Alcatel OmniSwitch/Router Betriebsanweisung Seite 275

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Vernetzung Alcatel OmniSwitch/Router