6-2
RADIUS Authentication, Authorization, and Accounting
Overview
The switch also supports RADIUS accounting for Web Authentication and
MAC authentication sessions.
Note The switch does not support RADIUS security for SNMP (network manage-
ment) access. For information on blocking access through the WebAgent,
refer to “Controlling WebAgent Access” on page 6-37.
Accounting Services
RADIUS accounting on the switch collects resource consumption data and
forwards it to the RADIUS server. This data can be used for trend analysis,
capacity planning, billing, auditing, and cost analysis.
RADIUS-Administered CoS and Rate-Limiting
The switches covered in this guide take advantage of vendor-specific attri-
butes (VSAs) applied in a RADIUS server to support these optional, RADIUS-
assigned attributes:
■ 802.1p (CoS) priority assignment to inbound traffic on the specified
port(s) (port-access authentication only)
■ Per-Port Rate-Limiting on a port with an active link to an authenti-
cated client (port-access authentication only)
RADIUS-Administered Commands Authorization
This feature enables RADIUS server control of an authenticated client’s access
to CLI commands on the switch. Refer to “Commands Authorization” on page
6-38.
To Next Page
Loading...
Need help?
General
