General Aaa Configuration; Authentication Procedure With A Radius Server - Patton electronics SmartWare R.3.20 Software Configuration Manual

SmartWare Software Configuration Guide
Figure 14 illustrates the authentication procedure for a user logging into a SmartNode that is configured to use
RADIUS as authentication method.
General AAA Configuration
The AAA component consists of AAA profiles and AAA methods. A service (e.g. Telnet) has to specify a profile it
wants to apply to all login requests. The profile then specifies the sequence in which methods are applied to obtain
AAA information. Figure 15
Service
Telnet
Console
The Telnet service uses an AAA profile called cli-login. This profile specifies that the following methods are used
in the order they appear in the configuration:
1. Query RADIUS server radius_deepblue.
2. Query RADIUS server radius_extern.
The AAA component
3. Authentication accepted
4. Access granted
User
1. Login Request
Figure 14. Authentication procedure with a RADIUS server
illustrates the correlation between the Telnet login and console login services.
Figure 15. How to use AAA methods and AAA profiles
AAA Server
(RADIUS)
IP
2. Authentication requested
Node
1
AAA profile
2
cli-login
3
1
console-
login
2
8 • RADIUS Client Configuration
AAA method
radius_deepblue
radius_extern
local database
none
96