Alcatel Carrier Internetworking Solutions omniswitch specification

Managing Switch Security	Authenticated Switch Access

Network Administrator

Customer

ACE/Server

	user
The switch polls the server	privileges
for login information; privi-
leges are stored on the
switch.	OmniSwitch
	OmniSwitch

ACE/Server

	end-user
The switch polls the server	profiles
for login information; end-
user profiles are stored on
the switch.	OmniSwitch
	OmniSwitch

Authentication-Only Server (ACE/Server)

Note. A RADIUS server supporting the challenge and response mechanism as defined in RADIUS RFC 2865 may access an ACE/Server for authentication purposes. The ACE/Server is then used for user authentication, and the RADIUS server is used for user authorization.

Interaction With the User Database

By default, switch management users may be authenticated through the console port via the local user database. If external servers are configured for other management interfaces (such as Telnet, or HTTP) but the servers become unavailable, the switch will poll the local user database for login information.

Access to the console port provides secure failover in case of misconfiguration or if external authentica- tion servers become unavailable. The admin user is always authorized through the console port via the local database (provided the correct password is supplied), even if access to the console port is disabled.

The database includes information about whether or not a user is able to log into the switch and which kinds of privileges or rights the user has for managing the switch. The database may be set up by the admin user or any user with write privileges to the AAA commands.

See Chapter 7, “Managing Switch User Accounts,” for more information about setting up the user data- base.

ASA and Authenticated VLANs

Layer 2 Authentication uses Authenticated VLANs to authenticate users through the switch out to a subnet. Authenticated Switch Access authenticates users into the switch to manage it. The features are independent of each other; however, user databases for each feature may be located on the same authenti- cation server.

For more information about Authenticated VLANs, see “Configuring Authenticated VLANs” in the OmniSwitch 6600 Family Network Configuration Guide. For more information about authentication serv- ers, see “Configuring Authentication Servers” in the OmniSwitch 6600 Family Network Configuration Guide.

OmniSwitch 6600 Family Switch Management Guide March 2005

page 8-5

omniswitch specifications

Alcatel Carrier Internetworking Solutions offers the OmniSwitch series, renowned for its robust capabilities in delivering high-performance networking solutions tailored for a variety of enterprise and service provider environments. The OmniSwitch series is particularly recognized for its scalability, flexibility, and the depth of its feature set, making it a popular choice for organizations that demand reliable and efficient networking solutions.

One of the standout features of the OmniSwitch series is its advanced Layer 2 and Layer 3 switching capabilities, providing organizations with essential support for IP routing and robust Ethernet networking. This versatility ensures that the switch can seamlessly integrate into existing network architectures, facilitating smooth upgrade paths in response to evolving business needs. The OmniSwitch includes support for multiple protocols like RIP, OSPF, and BGP, making it suitable for complex networking topologies.

In terms of performance, OmniSwitch devices are engineered to handle high bandwidth demands. With features such as hardware-based forwarding, they ensure low latency and minimal packet loss, which are critical for applications sensitive to delays such as VoIP and video conferencing. Furthermore, they support Power over Ethernet (PoE), allowing users to power devices like IP phones and security cameras directly through the network.

Security is another key characteristic of the OmniSwitch series. It includes advanced security features such as robust access control lists (ACLs), port security, and built-in support for IEEE 802.1X authentication. These features collectively enhance the security posture of the network, protecting sensitive data and ensuring that only authorized devices can access the network resources.

The OmniSwitch is also designed with redundancy and reliability in mind. Features like Rapid Spanning Tree Protocol (RSTP) and Virtual Router Redundancy Protocol (VRRP) ensure that network uptime is maximized and that failover is swift in the event of a hardware failure. This makes it a viable option for organizations that cannot afford downtime.

In addition to these features, Alcatel's OmniSwitch series comes equipped with a user-friendly management interface. This interface simplifies the setup, configuration, and monitoring of the network, making it accessible even to those with limited networking expertise. Through intuitive dashboards and support for SNMP, administrators can manage their networks effectively.

In conclusion, Alcatel Carrier Internetworking Solutions' OmniSwitch series offers a comprehensive suite of features tailored to meet the needs of modern networks. With its blend of performance, scalability, security, and ease of management, the OmniSwitch stands out as a preferred choice for businesses seeking to enhance their networking infrastructure.

Alcatel Carrier Internetworking Solutions omniswitch manual Interaction With the User Database

Models: omniswitch

user

end-user