Switch Settings: AAA

From the RUCKUS One web interface, you can configure a RADIUS server, TACACS+ server, and Local Users for a switch.
You must configure RADIUS server, TACACS+ server, and Local Users in order to support authentication, authorization, and accounting processes on RUCKUS One managed ICX switches associated with a specific venue.
Complete the following steps to configure the AAA settings.
  1. In the Dashboard, click Venues. Alternatively, on the navigation bar, click Venues.
    The Venues page is displayed.
  2. Select the Venue Name and click Edit. Alternatively, select the Venue Name and click Configure.
    The Venue Details page is displayed.
  3. Select the Switch Configuration > AAA.
    The AAA tab is displayed.

    AAA Tab

  4. Click Servers and Users to configure a RADIUS server, TACACS+ server, and Local Users.
    1. Select a specific RADIUS Server from the table to edit, or add a RADIUS Server.
      1. Click Add RADIUS Server to add a new RADIUS Server. The Add RADIUS Server sidebar is displayed.

        Add RADIUS Server Sidebar

      2. Complete the following fields:
        • Name: Enter the RADIUS server name.
        • IP Address: Enter an IP address for the RADIUS server.
        • Authentication Port: Enter a port number for authentication.
        • Accounting Port: Enter a port number for accounting.
        • Shared Secret: Enter the shared secret.
      3. Click Save.
    2. Select a specific TACACS+ Server from the table to edit or add a TACACS+ Server.
      1. Click Add TACACS+ Server to add a new TACACS+ Server. The Add TACACS+ Server sidebar is displayed.

        Add TACACS+ Server Sidebar

      2. Complete the following fields:
        • Name: Enter the TACACS+ server name.
        • IP Address: Enter an IP address for the TACACS+ server.
        • Authentication Port: Enter a port number for authentication.
        • Shared Secret: Enter the shared secret.
        • Purpose: Select Default (All), Authentication, Authorization, or Accounting. By default, Default (All) is selected.
      3. Click Save.
    3. Select a specific Local Users from the table to edit or add Local Users.
      1. Click Add Local User. The Add Local User sidebar is displayed.

        Add Local User Server Sidebar

      2. Complete the following fields:
        • User Name: Enter a local user name.
        • Password: Enter the password for the local user.
        • Privilege: Select Port Config, Read Only, or Read Write.
      3. Click Save.
      4. Select a username to view or edit the associated password, or display information on how many switches use this password.

        Viewing Local User Password Used In Switches

        Note: The Use In column displays information on the total number of switches in the venue and the total number of switches that use the password.
    4. (Optional) Click Edit to display the Edit Local User sidebar and edit the password; click Save to save the new password.
  5. Click Settings, or scroll down to the Settings section, to configure Log-in Authentication, Authorization, and Accounting settings.
    1. Configure the Log-in Authentication settings.
      1. Complete following fields:
        • SSH Authentication: By default, it is switched ON.
        • Telnet Authentication: Toggle the switch to ON.
        • Set Priority: Select the priority and move them to Available Servers & Users or Selected order table.
    2. Configure the Authorization settings.
      1. Complete following fields:
        • Command Authorization: Toggle the switch to ON and complete the following fields:
          • Level: Select Port Config, Read Only, or Read Write.
          • Set Priority: Select the priority and move them to Available Servers or Selected order table.
        • Executive Authorization: Toggle the switch to ON and complete the following fields:
          • Set Priority: Select the priority and move them to Available Servers or Selected order table.
    3. Configure the Accounting.
      1. Complete following fields:
        • Command Authorization: Toggle the switch to ON and complete the following fields:
          • Level: Select Port Config, Read Only, or Read Write.
          • Set Priority: Select the priority and move them to Available Servers or Selected order table.
        • Executive Authorization: Toggle the switch to ON and complete the following fields:
          • Set Priority: Select the priority and move them to Available Servers or Selected order table.
  6. Click Save AAA.
Parent topic: Switch Settings