Avaya Cajun P882 User Manual page 85

Login Order of
Operations
RADIUS Client
File settings
Avaya P550R, P580, P880, and P882 Multiservice Switch User Guide, Version 5.3.1
When a user attempts to log into the Avaya switch, the switch will
first check the local user accounts for the entered user name and
password. If found, the user is logged in using the local settings for
that account.
If no local account is found and RADIUS is enabled/configured, the
switch will send an Access Request message to the primary RADIUS
server in an attempt to authenticate the user remotely. If the user's
login is found and correct, then the RADIUS server responds with an
Access Accept message that includes the user's privileges. Provided
the user account has the right Management Type (for example: Web
Agent if you are trying to log in to the embedded Web Agent), the
user is granted access.
If the user's login is incorrect or does not exist, then a Access Reject
message is sent to the switch and the user is denied access to the
switch.
If the RADIUS server does not respond, the Avaya switch will
attempt to use the Secondary server if it is configured, and if not,
will continue to try the Primary. If the Secondary server is
configured, the switch will alternate between the two servers on
subsequent retries. It will wait the number of seconds specified in
the retry interval and try as many times as specified in the retry
time.
Consult the RADIUS server's documentation for information on
configuring Client and User files. The following tables list the Avaya
attributes and values for each of the Avaya attributes.
Table 2-5. Avaya Specific Attributes
Attribute Name
Avaya-Service-Type
Avaya-Management-Type
Avaya-Group
Attribute Attribute Specific
Values Description
1 Avaya-Read-Only
Avaya-Read-Write
Avaya-Administrative
2 Avaya-Mgt-All
Avaya-Local-CLI
Avaya-Remote-CLI
Avaya-Web
3 <group name>
Initialize and Setup
Attribute Specific
Value
1
2
3
1
2
3
4
2-27