Changing The Access Control Configuration; Radius Management; Figure 59 Choices In The Secondary Aaa Service Drop-Down Menu - Brocade Communications Systems 8 Administrator's Manual

17

RADIUS management

Changing the access control configuration

NOTE
The port number is not included.
Use the following procedure to change the access control configuration.
1. Open the Switch Administration window as described in
2. Select the SNMP tab.
3. Double-click an access host IP address in the Access Control List section and enter a new host
4. Select a permission for the host from the Access Control List menu.
5. Click Apply.

RADIUS management

Fabric OS supports RADIUS authentication, authorization, and accounting service (AAA). When
configured for RADIUS, the switch becomes a Network Access Server (NAS) that acts as a RADIUS
client. In this configuration, authentication records are stored in the RADIUS host server database.
Login and logout account name, assigned role, and time accounting records are also stored on the
RADIUS server.
You should set up RADIUS through a secure connection such as SSH.
The following are the three choices in the drop-down menu when RADIUS is selected as the primary
service
•
•
•
224
DRAFT: BROCADE CONFIDENTIAL
window" on page 35.
IP address. You can enter an IP address in either IPv4 or IPv6 format. When you use the IPv6
format, you must include a prefix; for example,
NOTE
The list is scrollable. If you do not see your user name, scroll down using the scroll bar or by
clicking the Access Host heading.
Options are Read Only and Read Write.
(Figure 59):
Switch Database when RADIUS Authentication Fails—When selected, the switch user login
database is checked whenever RADIUS authentication fails.
Switch Database When RADIUS Times Out—Switch user login database is checked only if the
physical connection to the RADIUS server fails.
None—Switch user login database is never checked. Only a RADIUS server can be used for
authentication.
FIGURE 59
Choices in the Secondary AAA Service drop-down menu
"Opening the Switch Administration
.
fec0::2002/64
Web Tools Administrator's Guide
53-1001772-01