LevelOne FGL-2870 - Manual (Page 131)

User Authentication
3-77
3
• Accounting for users that access management interfaces on the switch through the
console and Telnet.
• Accounting for commands that users enter at specific CLI privilege levels.
• Authorization of users that access management interfaces on the switch through
the console and Telnet.
To configure AAA on the switch, you need to follow this general process:
1. Configure RADIUS and TACACS+ server access parameters. See "Configuring
Local/Remote Logon Authentication" on page 3-72.
2. Define RADIUS and TACACS+ server groups to support the accounting and
authorization of services.
3. Define a method name for each service to which you want to apply accounting or
authorization and specify the RADIUS or TACACS+ server groups to use.
4. Apply the method names to port or line interfaces.
Note: This guide assumes that RADIUS and TACACS+ servers have already been
configured to support AAA. The configuration of RADIUS and TACACS+ server
software is beyond the scope of this guide, refer to the documentation provided
with the RADIUS or TACACS+ server software.
Configuring AAA RADIUS Group Settings
The AAA RADIUS Group Settings screen defines the configured RADIUS servers to
use for accounting and authorization.
Command Attributes
• Group Name - Defines a name for the RADIUS server group. (1-255 characters)
• Server Index - Specifies the RADIUS server and sequence to use for the group.
(Range: 1-5)
When specifying the index for a RADIUS sever, the server index must already be
defined (see "Configuring Local/Remote Logon Authentication" on page 3-72).
Web – Click Security, AAA, Radius Group Settings. Enter the RADIUS group name,
followed by the number of the server, then click Add.
Figure 3-43 AAA Radius Group Settings