Enterasys SecureStack C2 C2G170-24

SecureStack C2 Configuration Guide 23-1
23
Authentication and Authorization
Configuration
Thischapterdescribestheauthenticationandauthorizationcommandsandhowtousethem.
Overview of Authentication and Authorization Methods
Thefollowingmethodsareavailableforcontrollingwhichusersareallowedtoaccess,monitor,
andmanagetheswitch.
•Loginuseraccountsandpasswords–usedtologintotheCLIviaaTelnetconnectionorlocal
COMportconnection.Fordetails,referto“SettingUserAccountsandPasswords”on

page 3‐2.
•HostAccessControlAuthentication(HACA)–authenticatesuseraccessofTelnet
management,consolelocalmanagementandWebViewviaacentralRADIUSClient/Server
application.WhenRADIUSisenabled,thisessentiallyoverridesloginuseraccounts.When
HACAisactiveperavalidRADIUSconfiguration,theusernamesandpasswordsusedto

accesstheswitchviaTelnet,SSH,WebView,andCOMportswillbevalidatedagainstthe
configuredRADIUSserver.OnlyinthecaseofaRADIUStimeoutwillthosecredentialsbe
comparedagainstcredentialslocallyconfiguredontheswitch.
Fordetails,referto
“ConfiguringRADIUS”onpage 23‐3.
•SNMPuserorcommunitynames–allowsaccesstotheSecureStackC2switchviaanetwork
SNMPmanagementapplication.Toaccesstheswitch,youmustenteranSNMPuseror
communitynamestring.Thelevelofmanagementaccessisdependenton
theassociated
accesspolicy.Fordetails,refertoChapter 8.
For information about... Refer to page...
Overview of Authentication and Authorization Methods 23-1
Configuring RADIUS 23-3
Configuring 802.1X Authentication 23-11
Configuring MAC Authentication 23-21
Configuring Multiple Authentication Methods 23-33
Configuring VLAN Authorization (RFC 3580) 23-45
Configuring MAC Locking 23-50
Configuring Port Web Authentication (PWA) 23-61
Configuring Secure Shell (SSH) 23-73
Configuring Access Lists 23-75