Radius-Server Service-Type - Enterasys Matrix-V V2H124-24 Configuration Manual

4
Command Line Interface

radius-server service-type

This command instructs the switch to send the Filter ID to the RADIUS server during
authentication. Use the no form to disable this feature.
Syntax
[no] radius-server service-type
Default Setting
Enabled
Command Mode
Global Configuration
Command Usage
• Some RADIUS servers do not support the Filter ID attribute. Be sure you
disable this attribute if the RADIUS server you are using does not support the
Filter ID attribute.
• The RADIUS server "user" or other corresponding file should be configured
with the following attribute if you want it to process the Filter ID sent by the
switch during authentication:
"Enterasys:version=n:mgmt=xx" according to the following rule:
–> "Enterasys" is a required keyword and must be positioned first.
–> "version" is a required keyword and specifies the Filter-ID syntax version.
(Currently n=1 is the only value supported.)
–> "mgmt" identifies the management privilege level.
(Currently only management logins are supported.)
–> "xx" takes one of the following values:
- "su" for administrator access right (privilege level 15).
- "rw" for administrator access right (privilege level 15).
- "ro" for guest access right (privilege level 0).
• If there is no Filter-ID attribute or the value of Filter-ID is not well-formed, the
Service-Type attribute will determine the access level. A Service-Type
attribute with the value of Administrative, NAS-Prompt or Authenticate-Only
indicates administrator or guest access rights (depending on the Filter-ID),
others indicate that management access will be denied. If there is no
Filter-ID attribute, or no "mgmt=" field exists in the Filter-ID, the Service-Type
attribute will determine the access level. If the Service-Type is not encoded,
then management access will be denied. A Service-Type attribute with the
value of NAS-Prompt or Administrative-User indicates administrator access
rights, others indicate guest access rights. The authentication levels based
on the Filter ID and Service Type are listed in the following table.
4-90