3Com 5500-SI Configuration Manual page 657

2 Update the dictionary for Switch login
a In
/usr/local/etc/raddb
containing the following information:
VENDOR 3Com
ATTRIBUTE 3Com-User-Access-Level
VALUE 3Com-User-Access-Level
VALUE 3Com-User-Access-Level
VALUE 3Com-User-Access-Level
b Edit the existing file
following line:
$INCLUDE dictionary.3Com
The new file
dictionary.3Com
server
3 Locate the existing file
authorized to administer the Switch 5500:
a Add an entry for Switch Login. For example
user-name Auth-Type = System, 3Com-User-Access-Level =
Administrator
This indicates that the server should return the 3Com vendor specific attribute
3Com-User-Access-Level
b Add an entry for Network Login. For example
user-name Auth-Type := Local, User-Password == "password"
4 Run the FreeRADIUS server with
any problems that may occur with the authentication:
cd /usr/local/sbin
./radiusd -sfxxyz -l stdout
Setting Up Auto VLAN and QOS using FreeRADIUS
It is slightly more complex to set up auto VLAN and QoS using FreeRADIUS, as the
dictionary file needs to be specially updated.
1 Update the
dictionary.tunnel
ATTRIBUTE Tunnel-Type
ATTRIBUTE Tunnel-Medium-Type
ATTRIBUTE Tunnel-Private-Group-Id 81
VALUE Tunnel-Type
VALUE Tunnel-Medium-Type
2 Locate the file
users
to the user. For example:
bob Auth-Type := Local, User-Password == "bob"
Tunnel-Medium-Type = TMT802,
Tunnel-Private-Group-Id = 2,
Tunnel-Type = VLAN,
Filter-Id = "profile=student"
create a new file called
43
1
Monitor
Manager
Administrator
in
dictionary /usr/local/etc/raddb
will be used in configuring the FreeRADIUS
in
users /usr/local/etc/raddb
in the Access-Accept message for that user.
, to turn on debugging. so you can see
radiusd
file with the following lines:
64
65
VLAN 13
TMT802
in
/usr/local/etc/raddb
Setting Up A RADIUS Server
dictionary.3Com
Integer
1
2
3
to add the
and for each user
integerhas_tag
integerhas_tag
stringhas_tag
6
and add the return list attributes
657
3Com