Dell PowerConnect B-RX Configuration Manual page 172

4
Configuring RADIUS security
4. Configure authentication-method lists. Refer to
5. Optionally configure RADIUS authorization. Refer to
6. Optionally configure RADIUS accounting.
Configuring
NOTE
For the device, RADIUS Challenge is supported for 802.1x authentication but not for login
authentication.
During the RADIUS authentication process, if a user supplies a valid username and password, the
RADIUS server sends an Access-Accept packet to the device, authenticating the user. Within the
Access-Accept packet are three Brocade vendor-specific attributes that indicate:
•
•
•
You must add these three Brocade vendor-specific attributes to your RADIUS server's configuration,
and configure the attributes in the individual or group profiles of the users that will access the
device.
Brocade's Vendor-ID is 1991, with Vendor-Type 1. The following table describes the Brocade
vendor-specific attributes.
TABLE 36
Attribute name
foundry-privilege-level
100
RADIUS" on page 103.
page 104.
Brocade
-specific attributes on the RADIUS server
The privilege level of the user
A list of commands
Whether the user is allowed or denied usage of the commands in the list
Brocade
vendor-specific attributes for RADIUS
"Configuring authentication-method lists for
"Configuring RADIUS authorization"
"Configuring RADIUS accounting"
Attribute ID Data type
1 integer
on page 106.
Description
Specifies the privilege level for the user. This
attribute can be set to one of the following:
0 Super User level – Allows complete
read-and-write access to the system. This is
generally for system administrators and is the
only management privilege level that allows
you to configure passwords.
4 Port Configuration level – Allows
read-and-write access for specific ports but
not for global (system-wide) parameters.
5 Read Only level – Allows access to the
Privileged EXEC mode and CONFIG mode of
the CLI but only with read access.
BigIron RX Series Configuration Guide
on
53-1001810-01