Radius Servers - OmniSwitch os6900 Network Configuration Manual

Managing Authentication Servers

RADIUS Servers

RADIUS is a standard authentication and accounting protocol defined in RFC 2865 and RFC 2866. A
built-in RADIUS client is available in the switch. A RADIUS server that supports Vendor Specific
Attributes (VSAs) is required. The Alcatel-Lucent attributes can include VLAN information, time-of-day,
or slot/port restrictions.
RADIUS Server Attributes
RADIUS servers and RADIUS accounting servers are configured with particular attributes defined in RFC
2138 and RFC 2139, respectively. These attributes carry specific authentication, authorization, and config-
uration details about RADIUS requests to and replies from the server. This section describes the attributes
and how to configure them on the server.
Standard Attributes
The following tables list RADIUS server attributes 1–39 and 60–63, their descriptions, and whether the
Alcatel-Lucent RADIUS client in the switch supports them. Attribute 26 is for vendor-specific informa-
tion and is discussed in
used for RADIUS accounting servers and are listed in
page 29-10.
Num. Standard Attribute
1 User-Name
2 User-Password
3 CHAP-Password
4 NAS-IP-Address
5 NAS-Port
6 Service-Type
OmniSwitch AOS Release 7 Network Configuration Guide
"Vendor-Specific Attributes for RADIUS" on page
Notes
Used in access-request and account-request packets.
—
Not supported.
Sent with every access-request. Specifies which switches a
user can have access to. More than one of these attributes is
allowed per user.
Virtual port number sent with access-request and account-
request packets. Slot/port information is supplied in attribute
26 (vendor-specific).
Framed-User (2) if authentication request type is:
- supplicant/802.1x authentication
- captive-portal authentication
- ASA authentication
Call-Check (10) if authentication request type is:
- MAC based authentication
29-9. Attributes 40–59 are
"RADIUS Accounting Server Attributes" on
June 2013
RADIUS Servers
page 29-7