CONFIGURING OFF-NODE SERVER INFORMATION

OVERVIEW

This chapter provides information on configuring the CyberSWITCH so that it will be able to communicate with an off-node server. This communication may be for Authentication or Accounting purposes. The off-node servers supported are:

Connection Services Manager (CSM)

RADIUS

TACACS

ACE

CSM, RADIUS Authentication, TACACS and ACE are all authentication servers; RADIUS Accounting is the accounting server. Please refer to your specific off-node server documentation for information on each server’s individual requirements.

This chapter also provides off-node configuration information for:

Multiple administration login names

RADIUS Accounting

RFC2138 RADIUS

Dynamic Device options

MULTIPLE ADMINISTRATION LOGIN NAMES

When configuring the off-node server itself, you may configure up to 101 different names for system administration login. You may assign administration capabilities to specific personnel with different passwords, passcodes, and/ or SecureID cards. By using this feature, you can track who logged in to what system via the security server log.

When configuring your off-node server, identify each device and/or user with one of the following access levels:

guest: limited access

admin: administrative-level access when only one administrator necessary

admin00 through admin99: administrative-level access for multiple users

An example of a properly configured ACE server may resemble the following:

User

Client

name: John Doe

name: mynode1

address: Remote Office1

address: 1.1.1.1

client activation: mynode1

type: communications server

default login name: admin10

user activation: John Doe

assigned token: 04690074

 

Page 207
Image 207
Enterasys Networks CSX5500, CSX6000, CSX7000 Configuring OFF-NODE Server Information, Multiple Administration Login Names