
WHITE PAPER
Copyright © 2004 Avocent. All rights reserved.
When selecting a console management appliance, make sure that the appliance supports a means of
external authentication, such as RADIUS. Originally developed for remote access dial-in user
authentication, RADIUS is now widely used for access to routers and other data center devices such
as console management appliances.
Authentication attempts that are fielded by the CCM appliance are passed to the external server via
the RADIUS protocol. The server, in turn, provides access right information back to the CCM
appliance if the username and password are valid. If the account is not valid, then the request will
be denied.
Tools To Tighten Security
Security is best managed as a series of layers, data encryption, although necessary, is not sufficient.
Console management solutions must provide security features across many dimensions. As an
example, the following chart details various aspects of security that are offered by the CCM
Console Manager.
Figure 4: As shown in the
illustration, a RADIUS
server is used to manage
user accounts.
IP
Telnet/SSH
Clients
Firewall
RADIUS Server
100s of accounts
CCM Console Manager
Appliances with RADIUS Client
Target Devices
RADIUS servers may be used to further enhance security.
9
Comentarios a estos manuales