Radius Configuration Procedure; Configuring Brocade-Specific Attributes On The Radius Server - Dell PowerConnect B-RX Configuration Manual

4
Configuring RADIUS security
•

RADIUS configuration procedure

Use the following procedure to configure a BigIron RX for RADIUS.
1. Configure Brocade vendor-specific attributes on the RADIUS server. Refer to
2. Identify the RADIUS server to the BigIron RX. Refer to
3. Set RADIUS parameters. Refer to
4. Configure authentication-method lists. Refer to
5. Optionally configure RADIUS authorization. Refer to
6. Optionally configure RADIUS accounting.
Configuring Brocade-specific attributes on the
RADIUS server
NOTE
For the BigIron RX, RADIUS Challenge is supported for 802.1x authentication but not for login
authentication.
During the RADIUS authentication process, if a user supplies a valid username and password, the
RADIUS server sends an Access-Accept packet to the device, authenticating the user. Within the
Access-Accept packet are three Brocade vendor-specific attributes that indicate:
•
•
•
You must add these three Brocade vendor-specific attributes to your RADIUS server's configuration,
and configure the attributes in the individual or group profiles of the users that will access the
BigIron RX.
Brocade's Vendor-ID is 1991, with Vendor-Type 1. The following table describes the Brocade
vendor-specific attributes.
102
You can select only one primary authentication method for each type of access to a device (CLI
through Telnet, CLI Privileged EXEC and CONFIG levels). For example, you can select RADIUS
as the primary authentication method for Telnet CLI access, but you cannot also select
TACACS+ authentication as the primary method for the same type of access. However, you can
configure backup authentication methods for each access type.
Brocade-specific attributes on the RADIUS server"
BigIron RX" on page 104.
RADIUS" on page 105.
page 107.
The privilege level of the user
A list of commands
Whether the user is allowed or denied usage of the commands in the list
on page 102.
"Identifying the RADIUS server to the
"Setting RADIUS parameters"
"Configuring authentication-method lists for
"Configuring RADIUS authorization"
"Configuring RADIUS accounting"
"Configuring
on page 104.
on page 109.
BigIron RX Series Configuration Guide
53-1002253-01
on