Authentication Commands
4-91
4
• In order to perform IEEE 802.1X authentication, when the RADIUS server
receives an Access-Accept packet which includes the Service-Type attribute
with the value of Framed or Authenticate-Only, it will send a Success
message to the RADIUS client of IEEE 802.1X authenticator. If this RADIUS
server receives an Access-Reject packet or Access-Accept packet which
has no Service-Type attribute with the value of Framed or Authenticate-Only,
it will send a Fail message to the RADIUS client of IEEE 802.1X
authenticator.
Example
Table 4-32. RADIUS Filter ID
None Administrative NAS-Prompt Authenticate-
Only
Unknown,
Unsupported
None Reject Management
(admin)
Management
(admin)
Management
(admin)
Reject
mgmt=su Management
(admin)
Management
(admin)
Management
(admin)
Management
(admin)
Reject
mgmt=rw Management
(admin)
Management
(admin)
Management
(admin)
Management
(admin)
Reject
mgmt=ro Management
(guest)
Management
(guest)
Management
(guest)
Management
(guest)
Reject
Console(config)#radius service-type
Console(config)#