62 Summit 200 Series Switch Installation and User Guide
Managing the Switch
RADIUS RFC 2138 Attributes
The RADIUS RFC 2138 optional attributes supported are as follows:
• User-Name
• User-Password
• Service-Type
• Login-IP-Host
RADIUS Server Configuration Example (Merit)
Many implementations of RADIUS server use the publicly available Merit
©
AAA server application,
available on the World Wide Web at:
http://www.merit.edu/aaa
Included below are excerpts from relevant portions of a sample Merit RADIUS server implementation.
The example shows excerpts from the client and user configuration files. The client configuration file
(
ClientCfg.txt) defines the authorized source machine, source name, and access level. The user
configuration file (
users) defines username, password, and service type information.
ClientCfg.txt
#Client Name Key [type] [version] [prefix]
#---------------- --------------- -------------- --------- --------
#10.1.2.3:256 test type = nas v2 pfx
#pm1 %^$%#*(&!(*&)+ type=nas pm1.
#pm2 :-):-(;^):-}! type nas pm2.
#merit.edu/homeless hmoemreilte.ses
#homeless testing type proxy v1
enable radius Enables the RADIUS client. When
enabled, all CLI logins are sent to the
RADIUS servers for authentication. When
used with a RADIUS server that supports
ExtremeWare CLI authorization, each CLI
command is sent to the RADIUS server for
authentication before it is executed.
enable radius-accounting Enables RADIUS accounting. The RADIUS
client must also be enabled.
show radius Displays the current RADIUS client
configuration and statistics.
show radius-accounting Displays the current RADIUS accounting
client configuration and statistics
unconfig radius {server [primary | secondary]} Unconfigures the radius client
configuration.
unconfig radius-accounting {server [primary |
secondary]}
Unconfigures the radius accounting client
configuration.
Table 19: RADIUS Commands (continued)
Command Description
To Next Page
Loading...
