Radius Servers - Alcatel-Lucent OmniSwitch 9900 Series Network Configuration Manual

Managing Authentication Servers

RADIUS Servers

RADIUS is a standard authentication and accounting protocol defined in RFC 2865 and RFC 2866. A
built-in RADIUS client is available in the switch. A RADIUS server that supports Vendor Specific
Attributes (VSAs) is required. The Alcatel-Lucent Enterprise attributes can include VLAN information,
time-of-day, or slot/port restrictions.
RADIUS Server Attributes
RADIUS servers and RADIUS accounting servers are configured with particular attributes defined in RFC
2138, RFC 2139, and RFC 3162 respectively. These attributes carry specific authentication, authorization,
and configuration details about RADIUS requests to and replies from the server. This section describes the
attributes and how to configure them on the server.
Standard Attributes
The following tables list RADIUS server attributes 1–39 and 60–63, their descriptions, and whether the
Alcatel-Lucent Enterprise RADIUS client in the switch supports them. Attribute 26 is for vendor-specific
information and is discussed in
are used for RADIUS accounting servers and are listed in
page 31-10. Attributes 95–100 used for RADIUS servers to support IPv6 network access are listed
in"Configuring the RADIUS Client" on page 31-11
Num. Standard Attribute
1 User-Name
2 User-Password
3 CHAP-Password
4 NAS-IP-Address
5 NAS-Port
6 Service-Type
OmniSwitch AOS Release 8 Network Configuration Guide
"Vendor-Specific Attributes for RADIUS" on page
Notes
Used in access-request and account-request packets.
—
Not supported.
Sent with every access-request. Specifies which switches a
user can have access to. More than one of these attributes is
allowed per user.
Virtual port number sent with access-request and account-
request packets. Slot/port information is supplied in attribute
26 (vendor-specific).
Framed-User (2) if authentication request type is:
- supplicant/802.1x authentication
- captive-portal authentication
- ASA authentication
Call-Check (10) if authentication request type is:
- MAC based authentication
December 2017
"RADIUS Accounting Server Attributes" on
RADIUS Servers
31-9. Attributes 40–59
page 31-7