Filter
Top Products
AlliedWare Plus Version 2.2.4 Management Software Web Browser User’s Guide
201
The following steps illustrate the authentication process that occurs
between the switch and an authentication server when a manager logs on:
1. The switch uses its RADIUS or TACACS+ client to transmit the user
name and password to an authentication server on the network.
2. The server checks to see if the user name and password are valid.
3. If the combination is valid, the authentication server notifies the switch,
which completes the login process, allowing the manager access to its
management software.
4. If the user name and password are invalid, the authentication protocol
server notifies the switch, which cancels the login.
Accounting
Information
RADIUS and TACACS+ also provides a way to monitor usage by login
users. You can configure the switch to send a start accounting message at
the beginning of a session and a stop accounting message at the end of
the session to an authentication sever.
Configuring
RADIUS and
TACACS+
To authenticate using a RADIUS or TACACS+ server, you must configure
remote manager authentication and add authentication servers that the
switch can access.
You can configure up to three servers each for the RADIUS and
TACACS+ features. However, only one authentication method, either
RADIUS or TACACS+, at a time.
To configure remote manager authentication and add authentication
servers, choose from the following procedures:
“Configuring RADIUS for Remote Manager Authentication” on
page 203
“Configuring TACACS+ for Remote Manager Authentication” on
page 208
Placing RADIUS
and TACACS+
Servers in the
Client’s List
When a user logs on to the switch, the authentication client polls the
servers for authentication information in the order in which they are listed
in the client. The order that you add a server determines its order on the
client. For instance, the first server that you add becomes Server 1, the
second server that you add becomes Server 2, and the third server that
you add becomes Server 3.
When you remove a server from the switch, the place holder is retained.
For example, you make the following assignments:
Server 1 has an IP address of 192.168.10.11
Server 2 has an IP address of 192.168.10.12
Server 3 has an IP address of 192.168.10.13