Radius Over Ipv6 - Avaya 8800 Planning And Engineering, Network Design

• KERBEROS
• other systems like TACACS/TACACS+
Figure 144: RADIUS server as proxy for stronger authentication
You must tell each RADIUS client how to contact its RADIUS server. When you configure a client to
work with a RADIUS server, be sure to:
• Enable RADIUS.
• Provide the IP address of the RADIUS server.
• Ensure the shared secret matches what is defined in the RADIUS server.
• Provide the attribute value.
• Indicate the order of priority in which the RADIUS server is used. (Order is essential when
more than one RADIUS server exists in the network.)
• Specify the UDP port that is used by the client and the server during the authentication
process. The UDP port between the client and the server must have the same or equal value.
For example, if you configure the server with UDP 1812, the client must have the same UDP
port value.
Other customizable RADIUS parameters require careful planning and consideration on your part, for
example, switch timeout and retry. Use the switch timeout to define the number of seconds before
the authentication request expires. Use the retry parameter to indicate the number of retries the
server accepts before sending an authentication request failure.
Avaya recommends that you use the default value in the attribute-identifier field. If you change the
set default value, you must alter the dictionary on the RADIUS server with the new value. To
configure the RADIUS feature, you require Read-Write-All access to the switch.
For more information about RADIUS, see Avaya Ethernet Routing Switch 8800/8600 Security,
NN46205-601.

RADIUS over IPv6

The Avaya Ethernet Routing Switch 8800/8600 supports RADIUS over IPv6 networks to provide
security against unauthorized access.
June 2016 Planning and Engineering — Network Design
Comments on this document? infodev@avaya.com
Control plane security
283