Dell PowerConnect 8100 User's Configuration Guide - Page 183

• Network: Network authorization enables a RADIUS server to assign a particular 802.1X supplicant to a VLAN. For more information about 802.1X, see "Configuring Port and System Security" on page 469. Table 10-3 shows the valid methods for each type of authorization: Table 10-3. Authorization Methods Method local none radius tacacs Commands no yes no yes Exec yes yes yes yes Network no no yes no Exec Authorization Capabilities PowerConnect switches support two types of service configuration with exec authorization: privilege level and administrative profiles. Privilege Level By setting the privilege level during exec authorization, a user can be placed directly into Privileged EXEC mode when they log into the command line interface. Administrative Profiles The Administrative Profiles feature allows the network administrator to define a list of rules that control the CLI commands available to a user. These rules are collected in a "profile." The rules in a profile can define the set of commands, or a command mode, to which a user is permitted or denied access. Within a profile, rule numbers determine the order in which the rules are applied. When a user enters a CLI command, rules within the first profile assigned to the user are applied in descending order until there is a rule that matches the input. If no rule permitting the command is found, then the other profiles assigned to the user (if any) are searched for rules permitting the command. Rules may use regular expressions for command matching. All Configuring Authentication, Authorization, and Accounting 183