Patton electronics SmartNode Series Software Configuration Manual page 104

SmartWare Software Configuration Guide
3. Query the local database (see
how to configure the local database)
If, e.g. radius_deepblue is not available, radius_extern will be queried after a timeout. But if radius_deepblue
gives an answer that rejects the login request, the remaining methods are not used and the login is denied. The
same applies to the console service, which uses the profile console-login. This profile uses the following sequence
of methods:
1. Ask radius server radius_deepblue.
2. Ask predefined method none. This method always grants access as system operator.
If radius_deepblue is not available, access will be granted by the method none. If radius_deepblue rejects the
login request, console access is denied. If radius_deepblue confirms the request, console access is granted.
Do the following to configure the AAA component.
Mode: Configure
Step
1 node(cfg)#profile authentication name
2 node(pf-auth)[name]#method [index]
{local | none | {radius name}}
3
4 node(pf-auth)[name]#server-timeout
seconds
5 node(pf-auth)[name]#exit
6 node(cfg)#terminal Telnet use
authentication profile-name
7 node(cfg)#terminal console use
authentication profile-name
8 node(cfg)#show profile authentication
[name]
Example: Create the AAA profiles for login over Telnet and login over console, as they are shown in
and use them on the Telnet login and console login services.
node>enable
node#configure
node(cfg)#profile authentication remote-radius
node(pf-auth)[remote-~]#method radius radius_deepblue
node(pf-auth)[remote-~]#method radius radius_extern
node(pf-auth)[remote-~]#method local
node(pf-auth)[remote-~]#server-timeout 15
The AAA component
"Configuring the local database accounts"
Command
8 • RADIUS Client Configuration
on page 110 for information on
Purpose
Creates an authentication profile with name
name and enters profile authentication configura-
tion mode.
Adds an AAA method to the profile. For RADIUS
you have to specify a name. For information on
how to configure local accounts and RADIUS
servers, refer to chapter 9,
on page 112. With index you can add a method
between to others.
Repeat step 2 for all AAA methods you want to
add
Sets the timeout after that the next AAA method
in the list is requested if no answer is received.
Goes back to the parent configuration mode
Specifies which AAA profile the Telnet login service
has to use.
Specifies which AAA profile the console login
service has to use.
Displays the configured profiles
"IP context overview"
figure 15,
104