Nortel 2350 参考指南
300 Configuring Authentication, Authorization, and Accounting Parameters
NN47250-102 (320666-G Version 02.01)
a
Select the Configuration tool bar option.
b
In the Organizer panel, click the plus sign next to the WSS.
c
Click the plus sign next to AAA.
d
Select Admin Access Rules.
e
In the Task List panel, select Create Console Access.
2
Type the userwildcard that is allowed to access the switch through the console port.
3
Click Next.
4
If the authentication rule is disabled, select Enabled.
When a rule is disabled, WLAN Management Software does not add it to the switch’s configuration.
5
Select the authentication method(s) in the Available RADIUS Server Groups list and click Add.
An authentication method specifies where the switch will look for user information to authenticate users.
You can select a RADIUS server group, LOCAL (the switch’s local user database), or both.
You can select a RADIUS server group, LOCAL (the switch’s local user database), or both.
WSS Software tries the methods in the order they appear in the Current RADIUS Server Groups list. To
reorder the methods, select a method and click Up or Down.
reorder the methods, select a method and click Up or Down.
•
If you specify a RADIUS server group as the first method and a user is denied access by the
RADIUS server, no authentication and authorization are attempted with the other methods
specified in the list.
RADIUS server, no authentication and authorization are attempted with the other methods
specified in the list.
•
If you specify LOCAL as the first method and a user is not in the local user database on the
WSS, authentication and authorization are attempted with a RADIUS server group if one is
defined in the method list.
WSS, authentication and authorization are attempted with a RADIUS server group if one is
defined in the method list.
The authentication methods you select are also used for authorization.
6
Click Next.
7
To enable this accounting rule for the SSID, select Enabled.
By default, accounting rules you configure in WLAN Management Software are disabled, which means
WLAN Management Software does not add the rules to the switch’s configuration.
WLAN Management Software does not add the rules to the switch’s configuration.
8
Select one of the following record options:
•
Select Start-Stop to specify that records are sent at the start of a session and the end of a
session.
session.
•
Select Stop-Only to specify that records are sent only at the end of a session.
9
Select the accounting method(s) in the Available RADIUS Server Groups list and click Add.
The options and processing are the same as those for authentication methods. (See
.)
10 Click Finish.
Creating an Access Rule for Telnet or SSH Access
1
Access the Create Admin User wizard:
a
Select the Configuration tool bar option.
b
In the Organizer panel, click the plus sign next to the WSS.
c
Click the plus sign next to AAA.