Administrator Guide

Security Commands 857
Command Authorization
Dell Networking switches support per command or enable authorization
using a TACACS server. See the authorization command in this section for
further information. Additionally, the RADIUS or TACACS server can be
configured to assign an administrative profile to a switch administrator. The
administrative profile identifies groups of commands which may be executed
by the administrator. See the Administrative Profiles Commands section for
further information on this capability.
Network Authentication
The network administrator can require that devices attached to the network
be authenticated prior to gaining access to network resources. This is most
often performed by the use of IEEE 802.1x in conjunction with a RADIUS or
TACACS authentication server. Dell Networking switches support use of
RADIUS or TACACS authentication servers as well as a local, switch based,
authentication server. Refer to the RADIUS Commands section for
information on configuring a RADIUS server for authentication of network
devices. See the 802.1x Commands section for information on configuring
device access to network resources.
Dell Networking switches support an internal authentication capability that
allows configuration of authentication preference lists for network connected
devices. The authentication preference lists support authentication methods
such as IEEE 802.1x, internal authentication, and no authentication. MAC
Authentication Bypass may be configured to allow IEEE 802.1x unaware
devices access to the network. Refer to the section below for information on
configuring authentication preference lists for network device access.
Local 802.1x Authentication Server
The Dell Networking switch supports a dedicated database for local
authentication of users for network access through the 802.1x feature. This
functionality is distinct from management access for the switch. See the
802.1x Commands section for information on configuring IEEE 802.1x access
to the network using an external authentication server.
2CSNXXX_SWUM204.book Page 857 Monday, January 25, 2016 1:25 PM