OS6860(E)_AOS_8.1.1.R01_Switch_Management_Guide

Managing Switch Security
Switch Security Overview
Switch Security Overview
Switch security features increase the security of the basic switch login process by allowing management
only through particular interfaces for users with particular privileges. Login information and privileges
may be stored on the switch and/or an external server, depending on the type of external server you are
using and how you configure switch access.
The illustration here shows the components of switch security:
End User
RADIUS or LDAP
Server
Servers supply login information
about the user. User
privilege information is also
available on RADIUS and
LDAP servers.
login request
OmniSwitch
management interface
local user
database
Authenticated Switch Access Setup
An external RADIUS or LDAP server can supply both user login and authorization information. External
servers may also be used for accounting, which includes logging statistics about user sessions. For information
about configuring the switch to communicate with external servers, see the “Managing Authentication
Servers” chapter in the OmniSwitch AOS Release 8 Network Configuration Guide.
If an external server is not available or is not configured, user login information and user authorization
may be provided through the local user database on the switch. The user database is described in
Chapter 6, “Managing Switch User Accounts.”
Logging may also be accomplished directly on the switch. For information about configuring local
logging for switch access, see “Configuring Accounting for ASA” on page 7-11. For complete details
about local logging, see the “Using Switch Logging” chapter in the OmniSwitch AOS Release 8 Network
Configuration Guide.
OmniSwitch AOS Release 8 Switch Management Guide May 2014 page 7-3