Version 3.1 SP2 Reference Guide - Extreme Networks

Using Identity ManagementIdentity Management Software LicenseYour software license determines the level of Identity Management available on Ridgeline. If a validSecurity FP License is installed, you are allowed to use all the Identity Management features supportedby Ridgeline.OverviewRidgeline’s Identity Management feature identifies network users and authorizes them to access devicesfor specific network services and information. Ridgeline provides role-based user access control tomanage this authentication mechanism.The Identity Management feature monitors users that connect to ports on a switch. Ridgeline providesthe tools to define users’ roles, policies, and rules and the necessary components that set the user apartfrom other network users. These roles, policies, and rules are the criteria that allow access to theinformation and services the network user needs. The switch identifies the user login and searches for amatch on Active Directory, where the match criteria is configured for that user. Figure 364 illustrates thisconcept.Figure 364: User Matched to a Defined Role“rrodgers”“sharpster”Activedirectoryuser login: sharpster rrodgers“rrodgers”Company = “EXTR”State = “CA”Department = “NMS”MatchcriteriaRole = “US Engineer”EX_idm_0004Role-Based Access ControlYou enable role-based access control on the switches and ports where user login data is identified. Thenyou define user roles that include conditions to match the user who has logged into the network.Ridgeline also supports context-based roles, where identities can play different roles at differentlocations.Roles, Policies, and RulesRolesRidgeline’s role-based access control supports two default roles:526Ridgeline Reference Guide