Configuring Radius Authentication And Authorization - Dell PowerConnect W-Airwave User Manual

Table 24 AMP Setup > Authentication Fields and Default Values (Continued)
Field
Primary Server Port
Primary Server Secret
Secondary Server Hostname/IP
Address
Secondary Server Port
Secondary Server Secret
3. Select Save and continue with additional steps.
4. To configure Cisco ACS to work with AirWave, you must define a new service named AMP that uses https on
the ACS server.
The AMP https service is added to the TACACS+ (Cisco) interface under the Interface Configuration

tab.
Select a checkbox for a new service.

Enter AMP in the service column and https in the protocol column.

Select Save.

5. Edit the existing groups or users in TACACS to use the "AMP service" and define a role for the group or user.
The role defined on the Group Setup page in ACS must match the exact name of the role defined on the

AMP Setup > Roles page.
The defined role should use the following format:

follows:
As with routers and switches, AirWave does not need to know usernames.
6. AirWave also needs to be configured as an AAA client.
On the Network Configuration page, select Add Entry.

Enter the IP address of AirWave as the AAA Client IP Address.

The secret should be the same value that was entered on the

7. Select TACACS+ (Cisco IOS) in the Authenticate Using drop down menu and select submit + restart.
NOTE: AirWave checks the local username and password store before checking with the TACACS+ server. If the user is found
locally, the local password and local role apply. When using TACAS+, it is not necessary or recommended to define users on the
AirWave server. The only recommended user is the backup administrator, in the event that the TACAS+ server goes down.
What Next?
Go to additional tabs in the AMP Setup section to continue additional setup configurations.

Complete the required configurations in this chapter before proceeding. AirWave support remains available to

you for any phase of AirWave installation.

Configuring RADIUS Authentication and Authorization

For RADIUS capability, you must configure the IP/Hostname of the RADIUS server, the TCP port, and the
server shared secret. Perform these steps to configuration RADIUS authentication:
50 | Configuring AMP
Default Description
49
N/A
N/A
49
N/A
role=DormMonitoring
Enter the port for the primary TACACS+ server.
Specify and confirm the primary shared secret for the primary TACACS+
server.
Enter the IP address or hostname of the secondary TACACS+ server.
Enter the port for the secondary TACACS+ server.
Enter the shared secret for the secondary TACACS+ server.
role=<name_of_AMP_role>
AMP
Dell PowerConnect W-AirWave 7.4 | User Guide
. One example is as
Setup > TACACS+ page.