Specifications
Administrative AAA Configuration Scenarios
3-4 Configuring AAA for Administrative and Local Access
About Administrative Access
Theauthentication,authorization,andaccounting(AAA)frameworkhelpssecurenetwork
connectionsbyidentifyingwhotheuseris,whattheusercanaccess,andtheamountofnetwork
resourcestheusercanconsume.
Access Modes
MSSprovidesAAAeitherlocallyorviaremoteserverstoauthenticatevalidusers.MSSprovides
twomodesofaccess:
• Administrativeaccessmode—AllowsanetworkadministratortoaccesstheRoamAbout
Switchandconfigureit.
Youmustestablishadministrativeaccessinenabledmodebeforeaddingusers.See“Enabling
anAdministrator”onpage 3‐5.
•Networkaccessmode—Allowsnetworkuserstoconnect throughtheRoamAboutSwitch.For
informationaboutconfiguringnetworkusers,seeChapter 17,ConfiguringAAAforNetwork
Users.
Types of Administrative Access
MSSallowsyouaccesstotheRoamAboutSwitchwiththefollowingtypesofadministrative
access:
• Console—Accessviaonlytheconsoleport.Formoreinformation,see“First‐Time
ConfigurationUsingtheConsole”onpage 3‐5.
• Telnet—UserswhoaccessMSSviatheTelnetprotocol.Forinformationaboutsettingupa
RoamAboutSwitchfor
Telnetaccess,seeChapter 5,ConfiguringandManagingIPInterfaces
andServices.
•SecureShell(SSH)—UserswhoaccessMSSviatheSSHprotocol.Forinformationabout
settingupaRoamAboutSwitchforSSHaccess,seeChapter 5,ConfiguringandManagingIP
InterfacesandServices.
•RoamAboutSwitchManager—AfteryouconfiguretheRoamAboutSwitch
asdescribedinthe
RoamAboutSwitchManagerUser’sGuide,youcanfurtherconfiguretheRoamAboutSwitch
usingtheRoamAboutSwitchMa nagertoolsuite.Formoreinformation,seetheRoamAbout
SwitchManagerReference.
• WebView—AWeb‐basedapplicationforconfiguringandmanagingasingleRoamAbout
SwitchthroughaWebbrowser.WebViewusesa
secureconnectionviaHypertextTransfer
ProtocoloverSecureSocketsLayer(HTTPS).