Table of Contents
Advertisement
Security
Management Access Authentication
STEP 5
Management Access Authentication
STEP 1
STEP 2
STEP 3
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
-
Prefix Length—Select the Prefix Length and enter the number of bits that
comprise the source IP address prefix.
Click Apply, and the rule is added to the access profile.
You can assign authorization and authentication methods to the various
management access methods, such as SSH, console, Telnet, HTTP, and HTTPS.
The authentication can be performed locally or on a TACACS+ or RADIUS server.
If authorization is enabled, both the identity and read/write privileges of the user
are verified. If authorization is not enabled, only the identity of the user is verified.
The authorization/authentication method used is determined by the order that the
authentication methods are selected. If the first authentication method is not
available, the next selected method is used. For example, if the selected
authentication methods are RADIUS and Local, and all configured RADIUS servers
are queried in priority order and do not reply, the user is authorized/authenticated
locally.
If authorization is enabled, and an authentication method fails or the user has
insufficient privilege level, the user is denied access to the device. In other words,
if authentication fails for an authentication method, the device stops the
authentication attempt; it does not continue and does not attempt to use the next
authentication method.
Similarly, if authorization is not enabled, and authentication fails for a method, the
device stops the authentication attempt.
To define authentication methods for an access method:
Click Security > Management Access Authentication.
Enter the Application (type) of the management access method.
Select Authorization to enable both authentication and authorization of the user
by the list of methods described below. If the field is not selected, only
authentication is performed. If Authorization is enabled, the read/write privileges
of users are checked. This privilege level is set in the User Accounts page.
19
409
Hide quick links:
Advertisement
Table of Contents
