BLADEOS 6.5.2 Application Guide

Switch User Accounts

The user accounts listed in Table 3 can be defined in the RADIUS server dictionary file.

Table 3 User Access Levels

User Account

Description and Tasks Performed

Password

 

 

 

User

The User has no direct responsibility for switch management.

user

 

He/she can view all switch status information and statistics

 

 

but cannot make any configuration changes to the switch.

 

 

 

 

Operator

The Operator manages all functions of the switch. The

oper

 

Operator can reset ports, except the management port.

 

 

 

 

Administrator

The super-user Administrator has complete access to all

admin

 

commands, information, and configuration commands on the

 

 

switch, including the ability to change both the user and

 

 

administrator passwords.

 

 

 

 

RADIUS Attributes for BLADEOS User Privileges

When the user logs in, the switch authenticates his/her level of access by sending the RADIUS access request, that is, the client authentication request, to the RADIUS authentication server.

If the remote user is successfully authenticated by the authentication server, the switch will verify the privileges of the remote user and authorize the appropriate access. The administrator has an option to allow secure backdoor access via Telnet/SSH/BBI. Secure backdoor provides switch access when the RADIUS servers cannot be reached. You always can access the switch via the console port, by using noradius and the administrator password, whether secure backdoor is enabled or not.

Note – To obtain the RADIUS backdoor password for your G8124, contact Technical Support.

All user privileges, other than those assigned to the Administrator, have to be defined in the RADIUS dictionary. RADIUS attribute 6 which is built into all RADIUS servers defines the administrator. The file name of the dictionary is RADIUS vendor-dependent. The following RADIUS attributes are defined for G8124 user privileges levels:

Table 4 BLADEOS-proprietary Attributes for RADIUS

User Name/Access

User-Service-Type

Value

 

 

 

User

Vendor-supplied

255

 

 

 

Operator

Vendor-supplied

252

 

 

 

Admin

Vendor-supplied

6

 

 

 

68 ￿ Chapter 4: Authentication & Authorization Protocols

BMD00220, October 2010

Page 68
Image 68
Blade ICE G8124-E manual Switch User Accounts, Radius Attributes for Bladeos User Privileges

G8124-E, G8124 specifications

The Blade ICE G8124 is a cutting-edge networking solution designed for high-performance data center environments. It has emerged as a popular choice among organizations that require reliable and efficient network infrastructure to support their growing demands for bandwidth and low-latency connectivity.

One of the key features of the Blade ICE G8124 is its high port density. This networking device typically offers 24 ports of 10 Gigabit Ethernet, ensuring that businesses can connect numerous devices without requiring extensive physical space. The design is also scalable, accommodating future expansion as organizational needs grow.

Another significant aspect of the G8124 is its advanced switching capabilities. It utilizes a non-blocking architecture, enabling simultaneous data transmissions on all ports. This characteristic ensures that there is no bottleneck in the network traffic, providing the high performance needed in data-intensive applications.

The G8124 incorporates various technologies to enhance its functionalities. It supports Layer 2 and Layer 3 switching, making it versatile for different networking needs. Additionally, it features comprehensive Quality of Service (QoS) settings that prioritize critical applications, such as VoIP and video streaming, ensuring smooth operation even under heavy loads.

In terms of security, the Blade ICE G8124 provides robust measures to protect the network. It supports features such as Access Control Lists (ACLs), port security, and VLANs, allowing administrators to segment the network and restrict unauthorized access. These security capabilities are vital in today’s landscape, where cyber threats are increasingly common.

Moreover, the G8124 offers excellent management features. It includes an intuitive user interface for easy configuration and monitoring of network performance. SNMP support allows integration with network management systems, providing administrators with insights needed to optimize their operations.

Power efficiency is also a hallmark of the Blade ICE G8124. It employs energy-saving technologies that reduce operational costs, an essential factor for environmentally-conscious organizations striving to minimize their carbon footprint.

In summary, the Blade ICE G8124 stands out with its high port density, advanced switching capabilities, robust security features, and efficient management options. This networking solution is designed to meet the demands of modern data centers, providing the performance, reliability, and scalability that organizations require. With its innovative technologies, the G8124 ensures that businesses can navigate the complexities of today's networking landscape effectively.