Dell N3200-ON Networking N-Series Switches CLI Reference Guide version 6.8.0 - Page 281

• If authentication servers are used, the administrator can identify at least two remote servers (the user may choose to configure only one server) and what protocol to use with the server, TACACS+ or RADIUS. One of the servers is primary and the other is the secondary server (the user is not required to specify a secondary server). If the primary server fails to respond in a configurable time period, the CLI automatically attempts to authenticate the user with the secondary server. • The administrator is able to specify what happens when both primary and secondary servers fail to respond. In this case, the user is able to indicate that the CLI should either use the local user accounts or reject all requests. • Even if the administrator configures the CLI to fail login when the remote authentication servers are down, the CLI allows access via the serial interface authenticated by locally managed account data. The default for serial port access is no login or password required. SYSLOG The switch supports sending logging messages to a remote SYSLOG server. The administrator configures a remote log server to which SYSLOG messages are sent. The following rules apply: • The administrator configures a remote SYSLOG server to which system logging messages are sent. • Log messages are implementation-dependent but may contain debug messages, security or fault events. • The switch maintains at most the last 1000 system events in the inmemory log. Security Logs The system log records security events including the following: • User login. • User logout. • Denied login attempts. • User attempt to exceed security access level. • Denied attempts by external management system to access the system. Using the CLI 281