Installation guide

D-64 Motorola RF Switch System Reference Guide
• If Radius authentication is used, associated role information is supplied to the Radius server, except
when using vendor specific return attributes.
For availability, the RF Switch also supports multiple Radius server definitions and fallback to provide
authentication in the event of failure or communication issues. If the primary Radius server is unavailable,
the RF Switch attempts authentication with the next RADIUS sever. If no Radius servers are available, the
RF Switch can fall back to its local database for authentication. In both the Radius server and local
authentication services are unavailable, read-only access can be optionally provided.
Local Management Authentication
By default, the RF Switch authenticates management users with its integrated local database. When
management user credentials are presented, the RF Switch validates the username and passwords against
its local database and assigns permissions based on associated roles assigned to the account. The RF Switch
can also deny authentication requests if the user is attempting to access a management interface not
specified in the accounts access mode list.
Associated roles can be assigned to management user accounts to determine switch access privileges.
Management users can be assigned a single role, such as a Monitor that provides read-only access, or
multiple roles such as Monitor and Web User which provides read-only access in addition to hotspot user
creation. The following table lists the supported associated roles supported by the RF Switch:
Associated Role Description
Monitor Assigns regular user permissions without any administrative rights
(read-only).
Help Desk Provides permissions for someone who typically troubleshoots and
debugs problems reported by the customer. The Help Desk Manager
typically runs troubleshooting utilities (like a sniffer), executes
service commands, views/retrieves logs and reboots the switch.
Network Provides privileges to configure all wired and wireless parameters
like IP configuration, VLANs, L2/L3 security, WLANs, radios, IDS and
hotspot.
System Administrator Provides permissions to configure general settings like NTP, boot
parameters, licenses, perform image upgrades, auto install, manager
redundancy/clustering and control access.