4 aaa – Interlogix NS3500-28T-4S User Manual User Manual
Page 238
238
Modify
Click
to edit login authentication list parameter.
Click
to delete login authentication list entry.
4.9.4 AAA
Authentication, authorization, and accounting (AAA)
provides a framework for configuring access control on the
Managed Switch. The three security functions can be summarized as follows:
Authentication — Identifies users that request access to the network.
Authorization — Determines if users can access specific services.
Accounting — Provides reports, auditing, and billing for services that users have accessed on the network.
The AAA functions require the use of configured RADIUS or TACACS+ servers in the network. The security servers
can be defined as sequential groups that are then applied as a method for controlling user access to specified services.
For example, when the switch attempts to authenticate a user, a request is sent to the first server in the defined group,
if there is no response the second server will be tried, and so on. If at any point a pass or fail is returned, the process
stops.
The Managed Switch supports the following AAA features:
Accounting for IEEE 802.1X authenticated users that access the network through the Managed Switch.
Accounting for users that access management interfaces on the Managed Switch through the console and
Telnet.
Accounting for commands that users enter at specific CLI privilege levels. Authorization of users that access
management interfaces on the Managed Switch through the console and Telnet.
To configure AAA on the Managed Switch, you need to follow this general process:
1.
Configure RADIUS and TACACS+ server access parameters. See “
Configuring Local/Remote Logon
Authentication
”.
2.
Define RADIUS and TACACS+ server groups to support the accounting and authorization of services.
3.
Define a method name for each service to which you want to apply accounting or authorization and specify
the RADIUS or TACACS+ server groups to use. Apply the method names to port or line interfaces.