Radius Server - Dell PowerConnect B-FCXs Configuration Manual

15
Configuring MAC-based VLANs
When both features are configured on a port, a device connected to the port is authenticated as
follows.
1. MAC-based VLAN is performed on the device to authenticate the device MAC address.
2. If MAC-based VLAN is successful, the device then checks to see if the RADIUS server included
3. If the Foundry-802_1x-enable VSA is not present in the Access-Accept message, or is present
4. If the Foundry-802_1x-enable VSA is present in the Access-Accept message, and is set to 0,
Configuring generic and Dell vendor-specific attributes on the RADIUS
server
If the RADIUS authentication process is successful, the RADIUS server sends an Access-Accept
message to the Dell PowerConnect device, authenticating the device. The Access-Accept message
includes Vendor-Specific Attributes (VSAs) that specify additional information about the device.
Add Dell vendor-specific attributes to your RADIUS server configuration, and configure the
attributes in the individual or group profiles of the devices that will be authenticated. Dell.
vendor-ID is 1991, vendor-type 1.
Vendor-Specific Attributes.
TABLE 89
Attribute name
Tunnel-Type
Tunnel-Medium-Type
Tunnel-Private-Group-I
D
532
the Foundry-802_1x-enable VSA (described in
authenticated the device.
and set to 1, then 802.1X authentication is performed for the device.
then 802.1X authentication is skipped.
Generic RADIUS attributes
Attribute ID
64
65
81
Table 90) in the Access-Accept message that
Table 89 lists generic RADIUS attributes.
Data type Optional or
mandatory
13 Mandatory
decimal
VLAN
6 Mandatory
decimal
802
decimal Mandatory
PowerConnect B-Series FCX Configuration Guide
Table 90 lists Dell
Description
RFC 2868.
RFC 2868.
RFC 2868. <vlan-id> or U:<vlan -id> – a
MAC-based VLAN ID configured on the Dell
PowerConnect device.
53-1002266-01