Switch Management Authentication

[ClaudioCaldeira]

Hi guys, 

I need some help again. 

How to configure a switch so that only a specific OU in active directory can log in to manage it, all changes to the config are logged somewhere, and vlans are set dynamically based on Active Directory OU of the person logged into the computer. 

Thank you 

Regards

Cláudio

[khldk]

I think you are asking about too things.

For logging into the switch, you will need to configure radius or tacacs.
That means setting up a radius server, and configure that part and then configure the switch to ask radius for credentials.

NB: Remember to have a local user as fallback and  setup the switch for local fallback - minimally for debugging, but it is a good idea in generel.

On the other part, you would need to configure network access control.