Dell N3200-ON Networking N-Series Switches User Guide version 6.8.0 - Page 241

9 Authentication, Authorization, and Accounting Dell Networking N-Series Switches This chapter describes how to control access to the switch management interface using authentication and authorization. These services can also be used to restrict or allow network access when used in conjunction with IEEE 802.1x. It also describes how to record this access using accounting. Together the three services are referred to by the acronym AAA. The topics covered in this chapter include: • AAA Introduction • Authentication • Authorization • Accounting • IEEE 802.1X • Captive Portal AAA Introduction AAA is a framework for configuring management security in a consistent way. Three services make up AAA: • Authentication-Validates the user identity. Authentication takes place before the user is allowed access to switch services. • Authorization-Determines which services the user is allowed to access. Examples of services are access to the switch management console and access to network services. • Accounting-Collects and sends security information about switch management console users and switch management commands Each service is configured using method lists. Method lists define how each service is to be performed by specifying the methods available to perform the service. The first method in a list is tried first. If the first method returns an Authentication, Authorization, and Accounting 241