Specifications

RoamAbout Mobility System Software Configuration Guide 3-1

Configuring AAA for

Administrative and Local Access

Overview of AAA for Administrative and Local Access

Enterasys NetworksMobilitySystemSoftware(MSS)supportsauthentication,authorization,and

accounting(AAA)forsecurenetworkconnections.Asadministrator,youmustestablish

administrativeaccessforyourselfandoptionallyotherlocalusersbeforeyoucanconfigurethe

RoamAboutSwitchforoperation.

Hereisanoverviewofconfigurationtopics:

• Consoleconnection.Bydefault,any

administratorcanconnecttotheconsoleportand

managetheswitch,becausenoauthenticationisenforced.(Enterasys Networksrecommends

thatyouenforceauthenticationontheconsoleportafterinitialconnection.)

• TelnetorSSHconnection.AdministratorscannotestablishaTelnetorSecureShell(SSH)

connectiontotheRoamAboutSwitchbydefault.To

provideTelnetorSSHaccess,youmust

addausernameandpasswordentrytothelocaldatabaseor,optionally,settheauthentication

methodforTelnetuserstoaRemoteAuthenticationDial‐InUserService(RADIUS)server.

• Restrictedmode.WhenyouinitiallyconnecttotheRoamAboutSwitch,yourmodeof

operationis

restricted.Inthismode,onlyasmallsubsetofstatusandmonitoringcommands

isavailable. Restrictedmodeisusefulforadministratorswithbasicmonitoringprivilegeswho

arenotallowedtochangetheconfigurationorruntraces.

For information about... Refer to page...

Overview of AAA for Administrative and Local Access 3-1

Before You Start 3-3

About Administrative Access 3-4

First-Time Configuration Using the Console 3-5

Configuring Accounting for Administrative Users 3-9

Displaying the AAA Configuration 3-10

Saving the Configuration 3-10

Administrative AAA Configuration Scenarios 3-11

Note: A CLI Telnet connection to the RoamAbout Switch is not secure, unlike SSH, RoamAbout

Switch Manager and WebView connections. (For details, see Chapter 16, Managing Keys and

Certificates.)