Installation guide

D-63
Switch Web UI Configuration
The following demonstrates how to disable insecure telnet, HTTP and SNMPv2 management interfaces:
1. From the switch menu tree select Management Access > Access Control.
2. Select the Enable Telnet, Enable SNMP v2, Enable HTTP and Enable FTP checkboxes.
3. Click Apply button.
4. Select Save (from the lower left-hand corner) to apply the changes.
D.5.1.5 Management User Authentication
Management services (Telnet, SSHv2, HTTP, HTTPs and FTP) require administrators provide a valid username
and password which can be authenticated locally on the RF Switch or centrally on a Radius server. SNMPv3
also requires a valid username and password from a management platform (such as RFMS, which is
authenticated by the SNMPv3 module).
For CLI and Web UI users, the RF Switch also requires role information for the user to know what permissions
to assign the session:
• If local authentication is used, associated role information is defined on the RF Switch when the user
account is created.
• If Radius authentication is used, role information is supplied to the Radius server. If no role information
is supplied, the RF Switch can apply default read-only permissions for the management session.
Administrators can also limit management users to specific management interfaces. During authentication,
the RF Switch looks at access mode assignments for the user ID to determine if the user has permissions to
access the requested management interface:
• If local authentication is used, role information is defined on the RF Switch when the user account is
created.