Web OS 10.0 Application Guide106 n Chapter 5: Secure Switch Management 212777-A, February 2002When the user logs in, the switch authenticates his/her level of access by sending the RADIUSaccess request, that is, the client authentication request, to the RADIUS authentication server.If the remote user is successfully authenticated by the authentication server, the switch willverify the privileges of the remote user and authorize the appropriate access. When both theprimary and secondary authentication servers are not reachable, the administrator has anoption to allow backdoor access via the console only or console and telnet access. The defaultis disable for telnet access and enable for console access.All user privileges, other than those assigned to the Administrator, have to be defined in theRADIUS dictionary. Radius attribute 6 which is built into all Radius servers defines the admin-istrator. The file name of the dictionary is RADIUS vendor-dependent. The following userprivileges are Web OS-proprietary definitions.Table 5-2 Web OS Alteon LevelsUser Name/Access User-Service-Type ValueUser Vendor-supplied 255SLB Operator Vendor-supplied 254Layer 4 Operator Vendor-supplied 253Operator Vendor-supplied 252SLB Administrator Vendor-supplied 251Layer 4 Administrator Vendor-supplied 250
