Manuals / Schneider Electric / Computer Equipment / Switch

Schneider Electric AP561x manual IP KVM authentication levels, Basic, Attribute, Group

Models: AP561x

1 26

Download 26 pages 30.42 Kb

Page 3

IP KVM authentication levels

●Basic

•Very simple implementation that allows the KVM to browse the LDAP directory for user credentials. All users are administrators

●Attribute

•Allow users in the LDAP directory to be distinguished as non-users, appliance administrators or users

●Group

•Provides highly granular security down to the port level

APC by Schneider Electric

Image 3

Schneider Electric AP561x manual IP KVM authentication levels, Basic, Attribute, Group

Contents

LDAP Implementation AP561x KVM Switches Allows easy implementation Does not require LDAP Schema to be touchedUses existing Schema Attribute field to store configuration setting LDAP ImplementationGroup IP KVM authentication levelsBasic AttributeSettings Used in this Lab OBWI Client LDAP Lab LayoutServer1 Server2 KVM IPKVM1Server3 LDAP ServerSynchronize Server Module names to AD Computer Object names APC by Schneider Electric Name the Server Modules via the Local Port OSDStartProgramsAdministrative ToolsActive Directory Users and Computers Active Directory Tasks2. Select New Organizational Unit APC by Schneider Electric queries instead of using the Admin accountThis is a special user account specifically for LDAP Create User to Browse the DirectoryAPC by Schneider Electric 2. Choose New GroupCreate two groups for IP KVM switch administrators and users 1. Right-click IPKVM OUNOTE In a production environment, groups in the Active Directory IPKVM OU would match the organizations hierarchy, usually by function, geography, or a combination 5. Click Object Types 6. Select Computers and Users Add the users andServer Modules to the appropriate groups that associate them 2. Click PropertiesCreate Computer Object in AD for the IP KVM Switch APC by Schneider Electric Log into the SwitchName the Switch From the Configure screen, select SNMP and name the switch IPKVM1APC by Schneider Electric Enable LDAP Authentication Click on Authentication under Appliance in the Configuration MenuAPC by Schneider Electric Check the Use LDAP Authentication box. On the Server Parameters tab, enter the IP address of the Primary Server 192.168.5.100 domain controller Configure LDAP Search Parameters APC by Schneider Electric Leave Query Parameter at BasicTest the basic LDAP Authentication APC by Schneider Electric Very basic Quick to set up All users have administrator rightsBasic Summary Ideal for smaller customersGroup Based Authentication Enter the Group Container IPKVM and test again Click on ConfigureQuery Mode IP KVM Switch and Group Attribute for Query Mode Server Change LDAP Query to GroupAPC by Schneider Electric Ideal for Enterprise customers Group SummaryHighly granular security Port level control Attributes set to groups rather than individual users Hugely scalableAPC by Schneider Electric Conclusion