Cabletron Systems CSX1000 Configuring OFF-NODE Server Information, Type communications server

CONFIGURING OFF-NODE SERVER INFORMATION

OVERVIEW

You can configure both local device entries and remote authentication databases for device authentication. When a device needs to be authenticated, the CyberSWITCH will first look the device up locally, and, if there is no device entry, will then check the remote database for device authentication.

This chapter provides information on configuring the CyberSWITCH to be able to communicate with an off-node server to receive authentication information. The off-node authentication servers supported are:

•VRA Manager

•RADIUS

•TACACS

•ACE

Also, please refer to your specific off-node server documentation for information on each server’s individual requirements.

MULTIPLE ADMINISTRATION LOGIN NAMES

When configuring the off-node server itself, you may configure up to 101 different names for system administration login. You may assign administration capabilities to specific personnel with different passwords, passcodes, and/ or SecureID cards. By using this feature, you can track who logged in to what system via the security server log.

When configuring your off-node server, identify each device and/or user with one of the following access levels:

•guest: limited access

•admin: administrative-level access when only one administrator necessary

•admin00 through admin99: administrative-level access for multiple users

An example of a properly configured ACE server may resemble the following:

User	Client
name: John Doe	name: mynode1
address: Remote Office1	address: 1.1.1.1
client activation: mynode1	type: communications server
default login name: admin10	user activation: John Doe
assigned token: 04690074