Security Commands 841Command AuthorizationDell EMC Networking switches support per command or enableauthorization using a TACACS server. See the authorization command inthis section for further information. Additionally, the RADIUS or TACACSserver can be configured to assign an administrative profile to a switchadministrator. The administrative profile identifies groups of commandswhich may be executed by the administrator. See the Administrative ProfilesCommands section for further information on this capability.Network AuthenticationThe network administrator can require that devices attached to the networkbe authenticated prior to gaining access to network resources. This is mostoften performed by the use of IEEE 802.1x in conjunction with a RADIUS orTACACS authentication server. Dell EMC Networking switches support useof RADIUS or TACACS authentication servers as well as a local, switch based,authentication server. Refer to the RADIUS Commands section forinformation on configuring a RADIUS server for authentication of networkdevices. See the 802.1x Commands section for information on configuringdevice access to network resources.Dell EMC Networking switches support an internal authentication capabilitythat allows configuration of authentication preference lists for networkconnected devices. The authentication preference lists supportauthentication methods such as IEEE 802.1x, internal authentication, and noauthentication. MAC Authentication Bypass may be configured to allowIEEE 802.1x unaware devices access to the network. Refer to the sectionbelow for information on configuring authentication preference lists fornetwork device access.Local 802.1x Authentication ServerThe Dell EMC Networking switch supports a dedicated database for localauthentication of users for network access through the 802.1x feature. Thisfunctionality is distinct from management access for the switch. See the802.1x Commands section for information on configuring IEEE 802.1x accessto the network using an external authentication server.
