Dlp- G281 Configure The Node For Radius Authentication - Cisco ONS 15454 DWDM Installation And Operation Manual

Chapter 10 Manage the Node
DLP-G281 Configure the Node for RADIUS Authentication
Purpose
Tools/Equipment
Prerequisite Procedures
Required/As Needed
Onsite/Remote
Security Level
Do not configure a node for RADIUS authentication until after you have added that node to the RADIUS
Caution
server and added the RADIUS server to the list of authenticators. If you do not add the node to a
RADIUS server prior to activating RADIUS authentication, no user will be able to access the node. Refer
to the User Guide for Cisco Secure ACS for Windows Server for more information about adding a node
to a RADIUS server.
The following Cisco vendor-specific attribute (VSA) needs to be specified when adding users to the
Note
RADIUS server:
shell:priv-lvl=N
where N is equal to:
•
•
•
•
In node view, click the Provisioning > Security > RADIUS Server tabs
Step 1
September 2005
This task allows you to configure a node for Remote Authentication Dial In
User Service (RADIUS) authentication. RADIUS validates remote users
who are attempting to connect to the network.
None
DLP-G46 Log into CTC, page 2-25
Before configuring the node for RADIUS authentication, you must first add
the node as a network device on the RADIUS server. Refer to the User
Guide for Cisco Secure ACS for Windows Server for more information
about configuring a RADIUS server.
As needed
Onsite or remote
Superuser
0 for Retrieve user
1 for Maintenance user
2 for Provisioning user
3 for Superuser
DLP-G281 Configure the Node for RADIUS Authentication
Cisco ONS 15454 DWDM Installation and Operations Guide, R6.0
(Figure 10-2).
10-55