User's Manual

NXC CLI Reference Guide
187
CHAPTER 28
AAA Server
This chapter introduces and shows you how to configure the NXC to use external
authentication servers.
28.1 AAA Server Overview
You can use an AAA (Authentication, Authorization, Accounting) server to provide access
control to your network.
The following lists the types of authentication server the NXC supports.
• Local user database
The NXC uses the built-in local user database to authenticate administrative users logging
into the NXC’s web configurator or network access users logging into the network through
the NXC. You can also use the local user database to authenticate VPN users.
• Directory Service (LDAP/AD)
LDAP (Lightweight Directory Access Protocol)/AD (Active Directory) is a directory
service that is both a directory and a protocol for controlling access to a network. The
directory consists of a database specialized for fast information retrieval and filtering
activities. You create and store user profile and login information on the external server.
• RADIUS
RADIUS (Remote Authentication Dial-In User Service) authentication is a popular
protocol used to authenticate users by means of an external or built-in RADIUS server.
RADIUS authentication allows you to validate a large number of users from a central
location.
28.2 Authentication Server Command Summary
This section describes the commands for authentication server settings.