Chapter 4
System Administration
RUGGEDCOM ROS
User Guide
116 Configuring the RADIUS Server
Attribute Value
Vendor-Specific Vendor-ID: 15004
Type: 1
Length: 11
String: RuggedCom
A RADIUS server may also be used to authenticate access on ports with 802.1X security support. When this is
required, the following attributes are sent by the RADIUS client to the RADIUS server:
Attribute Value
User-Name { The username as derived from the client's EAP identity response }
NAS-IP-Address { The Network Access Server IP address }
Service-Type 2
Frame-MTU 1500
EAP-Message
a
{ A message(s) received from the authenticating peer }
a
EAP-Message is an extension attribute for RADIUS, as defined by RFC 2869.
The following sections describe how to configure RADIUS authentication:
• Section 4.6.1.1, “Configuring the RADIUS Server”
• Section 4.6.1.2, “Configuring the RADIUS Client”
Section 4.6.1.1
Configuring the RADIUS Server
The Vendor-Specific attribute (or VSA) sent to the RADIUS server as part of the RADIUS request is used to
determine the access level from the RADIUS server. This attribute may be configured within the RADIUS server
with the following information:
Attribute Value
Vendor-Specific Vendor-ID: 15004
Format: String
Number: 2
Attribute: { Guest, Operator, Admin }
NOTE
If no access level is received in the response packet from the RADIUS server, access is denied.
Section 4.6.1.2
Configuring the RADIUS Client
The RADIUS client can be configured to use two RADIUS servers: a primary server and a backup server. If the
primary server is unavailable, the device will automatically attempt to connect with the backup server.
To Next Page
Loading...
Need help?
General
