Extreme Networks Summit 300-48 - Page 46

46 Summit 300-48 Switch Software User Guide
Managing the Switch
RADIUS RFC 2138 Attributes
The RADIUS RFC 2138 optional attributes supported are as follows:
• User-Name
• User-Password
• Service-Type
• Login-IP-Host
RADIUS Server Configuration Example (Merit)
Many implementations of RADIUS server use the publicly available Merit
©
AAA server application,
available on the World Wide Web at:
http://www.merit.edu/aaa
Included below are excerpts from relevant portions of a sample Merit RADIUS server implementation.
The example shows excerpts from the client and user configuration files. The client configuration file
(
ClientCfg.txt) defines the authorized source machine, source name, and access level. The user
configuration file (
users) defines username, password, and service type information.
ClientCfg.txt
#Client Name Key [type] [version] [prefix]
#---------------- --------------- -------------- --------- --------
#10.1.2.3:256 test type = nas v2 pfx
#pm1 %^$%#*(&!(*&)+ type=nas pm1.
#pm2 :-):-(;^):-}! type nas pm2.
#merit.edu/homeless hmoemreilte.ses
config radius [primary | secondary]
server [<ipaddress> | <hostname>]
{<udp_port>} client-ip <ipaddress>
Configures the primary and secondary RADIUS server. Specify the
following:
• [primary | secondary] — Configure either the primary or
secondary RADIUS server.
• [<ipaddress> | <hostname>] — The IP address or hostname
of the server being configured.
• <udp_port> — The UDP port to use to contact the RADUIS server.
The default UDP port setting is 1645.
• client-ip <ipaddress> — The IP address used by the switch
to identify itself when communicating with the RADIUS server.
The RADIUS server defined by this command is used for user name
authentication and CLI command authentication.
config radius [primary | secondary]
shared-secret {encrypted} <string>
Configures the authentication string used to communicate with the
RADIUS server.
show radius Displays the current RADIUS client configuration and statistics.
unconfig radius {server [primary |
secondary]}
Unconfigures the radius client configuration.
Table 11: RADIUS Commands (continued)
Command Description