Configuring A Radius Server Per Port - Dell PowerConnect B-FCXs Configuration Manual

Configuring a RADIUS server per port

You can optionally configure a RADIUS server per port, indicating that it will be used only to
authenticate users on ports to which it is mapped. A RADIUS server that is not explicitly configured
as a RADIUS server per port is a global server, and can be used to authenticate users on ports to
which no RADIUS servers are mapped.
Configuration notes
•
•
Configuration example and command syntax
The following shows an example configuration.
PowerConnect(config)#radius-server host 10.10.10.103 auth-port 1812 acct-port
1813 default key mykeyword dot1x port-only
PowerConnect(config)#radius-server host 10.10.10.104 auth-port 1812 acct-port
1813 default key mykeyword dot1x port-only
PowerConnect(config)#radius-server host 10.10.10.105 auth-port 1812 acct-port
1813 default key mykeyword dot1x
PowerConnect(config)#radius-server host 10.10.10.106 auth-port 1812 acct-port
1813 default key mykeyword dot1x
The above configuration has the following affect:
•
•
Syntax: radius-server host <ip-addr> | <server-name> [auth-port <number>] [acct-port
The host <ip-addr> is the IPv4 address.
The auth-port <number> parameter is the Authentication port number; it is an optional parameter.
The default is 1645.
The acct-port <number> parameter is the Accounting port number; it is an optional parameter. The
default is 1646.
The default key <string> dot1x parameter indicates that this RADIUS server supports the 802.1X
standard. A RADIUS server that supports the 802.1X standard can also be used to authenticate
non-802.1X authentication requests.
The port-only parameter is optional and specifies that the server will be used only to authenticate
users on ports to which it is mapped.
PowerConnect B-Series FCX Configuration Guide
53-1002266-01
This feature works with 802.1X and multi-device port authentication only.
You can define up to eight RADIUS servers per Dell PowerConnect device.
RADIUS servers 10.10.10.103 and 10.10.10.104 will be used only to authenticate users on
ports to which the servers are mapped. To map a RADIUS server to a port, refer to
RADIUS server to individual ports"
RADIUS servers 10.10.10.105 and 10.10.10.106 will be used to authenticate users on ports to
which no RADIUS servers are mapped. For example, port e 9, to which no RADIUS servers are
mapped, will send a RADIUS request to the first configured RADIUS server, 10.10.10.105. If
the request fails, it will go to the second configured RADIUS server, 10.10.10.106. It will not
send requests to 10.10.10.103 or 10.10.10.104, since these servers are configured as port
servers.
<number>] [default key <string> dot1x] [port-only]
Configuring RADIUS security
on page 1190.
32
"Mapping a
1189