topic Re: Radius and Local account EXOS Switch log in in ExtremeSwitching (EXOS/Switch Engine)

Radius and Local account EXOS Switch log in

Christopher_Tay — Fri, 19 Feb 2021 05:14:41 GMT

I have set up our X460 G2 switches with RADIUS login through our NAC. This works well however is it possible to also have the local accounts available? XMC uses a local account to login and if the NAC were to fail local account login we be needed. When I enable RADIUS mgmt-access the local accounts are no longer able to login.

We are running ver 30.7

Thank you,

Chris

Re: Radius and Local account EXOS Switch log in

Stefan_K_ — Fri, 19 Feb 2021 05:26:32 GMT

I think when NAC is unavailable a local login is possible. Also when you are connected via serial it should be possible (maybe only after a few tries if I remember correctly).

Why does your XMC uses local switch accounts and no radius-account? (you could also create one local account in the NAC if you don’t want to use an AD-Account.)

Re: Radius and Local account EXOS Switch log in

StephanH — Fri, 19 Feb 2021 06:06:44 GMT

Hello,

Stefan is right, in case the NAC (or another Radius server) is not reachable the local database is used for authentication. The RADIUS server take precedence over privileges configured in the local database.