ELTEX MES23xx User Manual

MES53xx, MES33xx, MES23xx Ethernet Switch Series 121
ip http authentication aaa
login-authentication
[loginauthorization]
[http | https] method_list
method_list: (local, none,
tacacs, radius)
Determines the authentication method when accessing HTTP
server. When the method list is installed, the additional
method will be applied only in case when error is returned to
the basic authentication method.
- method_list – authentication method:
local – by name from the local data base;
none – it is not used;
tacacs – use lists of all the TACACS+ servers;
radius – use lists of all the RADIUS servers.
no ip http authentication
aaa login-authentication
Set the default value.
aaa accounting commands
stop-only group tacacs+
-/by default, accounting the
commands is disabled
Enable accounting CLI commands via TACACS+ protocol.
no aaa accounting
commands stop-only group
Set the default value.
To grant the client access to the device, even if all authentication methods failed, use the
'none' method.
Table 5.115. RADIUS protocol accounting message attributes for control sessions
Attribute
Attribute
presence in
Start message
Attribute
presence in
Stop message
Description
User-Name (1)
Yes
Yes
User identification.
NAS-IP-Address (4)
Yes
Yes
The IP address of the switch used for Radius
server sessions.
Class (25)
Yes
Yes
An arbitrary value included in all session
accounting messages.
Called-Station-ID (30)
Yes
Yes
The IP address of the switch used for control
sessions.
Calling-Station-ID (31)
Yes
Yes
User IP address.
Acct-Session-ID (44)
Yes
Yes
Unique accounting identifier.
Acct-Authentic (45)
Yes
Yes
Specify the method for client authentication.
Acct-Session-Time (46)
No
Yes
Show how long the user is connected to the
system.
Acct-Terminate-Cause (49)
No
Yes
The reason why the session is closed.
Table 5.116. RADIUS protocol accounting message attributes for 802.1x sessions
Attribute
Attribute
presence in
Start message
Attribute
presence in
Stop message
Description
User-Name (1)
Yes
Yes
User identification.
NAS-IP-Address (4)
Yes
Yes
The IP address of the switch used for Radius
server sessions.
NAS-Port (5)
Yes
Yes
The switch port the user is connected to.
Class (25)
Yes
Yes
An arbitrary value included in all session
accounting messages.
Called-Station-ID (30)
Yes
Yes
IP address of the switch.
Calling-Station-ID (31)
Yes
Yes
User IP address.
Acct-Session-ID (44)
Yes
Yes
Unique accounting identifier.
Acct-Authentic (45)
Yes
Yes
Specify the method for client authentication.
Acct-Session-Time (46)
No
Yes
Show how long the user is connected to the
system.

ELTEX MES23xx Specifications

General

Brand	ELTEX
Model	MES23xx
Category	Switch
Language	English