Brocade Communications Systems RFS6000 System Reference Manual page 142

4
6. Refer to the Server field and define the following credentials for a primary and secondary
RADIUS Server Enter the IP address of the primary and secondary server acting as the Radius user authentication data source.
Address
RADIUS Port Enter the TCP/IP port number for the primary and secondary server acting as the Radius user authentication data
source. The default port is 1812.
RADIUS Shared Secret Provide a shared secret (password) for user credential authentication with the primary or secondary Radius server.
Server Timeout Enter a value (between 1 and 300 seconds) to indicate the number of elapsed seconds causing the switch to time
out on a request to the primary or secondary server.
Server Retries Enter a value between 1 and 100 to indicate the number of times the switch attempts to reach the primary or
secondary Radius server before giving up.
NOTE
The Radius or NAC server's Timeout and Retries should be less than what is defined for a client's
timeout and retries. If the client's time is less than the server's, a fall back to the secondary server
will not work.
7.
Accounting Server Enter the IP address of the primary and secondary server acting as the Radius accounting server.
Address
Accounting Port Enter the TCP/IP port number for the primary and secondary server acting as the Radius accounting data source. The
default port is 1813.
Accounting Shared Provide a shared secret (password) for user credential authentication with the primary or secondary Radius
Secret accounting server.
Accounting Timeout Enter a value (between 1 and 300 seconds) to indicate the number of elapsed seconds causing the switch to time
out a request to the primary or secondary accounting server.
Accounting Retries Enter a value between 1 and 100 to indicate the number of times the switch attempts to reach the primary or
secondary Radius accounting server before giving up.
Accounting Mode Use the Accounting Mode drop-down menu to define the accounting mode as either
Start-Interim-Stop.
8. Select the Re-authentication checkbox to force a periodic re-authentication with the Radius
9. Refer to the Advanced field to define the authentication protocol used with the Radius Server.
PAP PAP - Password Authentication Protocol sends a username and password over a network to a server that compares
the username and password to a table of authorized users. If the username and password are matched in the table,
server access is authorized.
CHAP CHAP is an encrypted authentication method based on Microsoft's challenge/response authentication protocol.
DSCP/TOS Optionally mark packets with a DiffServ CodePoint (DSCP) in its header. The DSCP value is stored in the first 6 bits of
the Type of Service (ToS) field that is part of the standard IP header. The DCSP values are associated with a
forwarding treatment called Per Hop Behaviors (PHB). Service can be provisioned (if necessary) by assigning a DCSP
point code from 1 - 6.
10. Click OK to save the changes made to this screen.
130
Radius server.
Refer to the Accounting field and define the following credentials for a primary and secondary
Radius Server.
Define the interval (in seconds) used with the selected accounting mode.
server. Periodic repetition of the authentication process provides ongoing security for currently
authorized connections. Define an interval between 30 and 65535 seconds.
Brocade Mobility RFS4000, RFS6000, and RFS7000 System Reference Guide
Start-Stop Stop Only,
, or
53-1002515-01