topic RE: Switch access with domain credentials. in ExtremeWireless (General)

Switch access with domain credentials.

Thomas_Maddox — Fri, 20 Nov 2015 04:30:00 GMT

Guys,
I am new to the Extreme line of switches and looking for direction. I have been hired as the network admin for a school system and have found that all of the switches (156) are configured with weak admin passwords and no session logging. I want to be able to get these switches setup for access using domain credentials and session logging per user for monitoring "who changed what and when". All of our switches are C3G124 running firmware of 06.61.14.0006. Thanks for any guidance.

RE: Switch access with domain credentials.

Christoph — Fri, 20 Nov 2015 17:52:00 GMT

Hello Thomas,

with RADIUS login this is possible. Take al look at https://community.extremenetworks.com/extreme/topics/radius_authenticate_just_management_or_network_...

Kind regrads
Christoph

RE: Switch access with domain credentials.

Curtis_Parish1 — Sat, 21 Nov 2015 00:09:00 GMT

"who changed what and when"

I am not sure you can log changes on a C3. You can log set commands on N and S series.

RE: Switch access with domain credentials.

Curtis_Parish1 — Sat, 21 Nov 2015 00:09:00 GMT

I do not know about TACACS+ but you can set the CLI application syslog level to 8
on S and N chassis and the set commands will be sent to syslog.

RE: Switch access with domain credentials.

Thomas_Maddox — Wed, 06 Jan 2016 04:58:00 GMT

I forgot to come back to update the post. I decided to use RADIUS for access authentication and it is working great. I am however looking into utilizing TACACS+ for accounting. Is it possible to utilize only the accounting feature provided by TACACS+ and utilize RADIUS for authentication or do I need to use TACACS for all?