Users Guide

Authentication, Authorization, and Accounting 253
9
Authentication, Authorization, and
Accounting
Dell EMC Networking N-Series Switches
This chapter describes how to control access to the switch management
interface using authentication and authorization. These services can also be
used to restrict or allow network access when used in conjunction with IEEE
802.1x. It also describes how to record this access using accounting. Together
the three services are referred to by the acronym AAA.
The topics covered in this chapter include:
• AAA Introduction
• Authentication
• Authorization
• Accounting
• IEEE 802.1X
• Captive Portal
AAA Introduction
AAA is a framework for configuring management security in a consistent way.
Three services make up AAA:
• Authentication—Validates the user identity. Authentication takes place
before the user is allowed access to switch services.
• Authorization—Determines which services the user is allowed to access.
Examples of services are access to the switch management console and
access to network services.
• Accounting—Collects and sends security information about switch
management console users and switch management commands
Each service is configured using method lists. Method lists define how each
service is to be performed by specifying the methods available to perform the
service. The first method in a list is tried first. If the first method returns an