Appendix G Using Radius Authentication; Using Radius Authentication To Access The Eternus Dx - Fujitsu ETERNUS DX60 S3 User Manual

Appendix G
Using RADIUS Authentication
This appendix describes supplementary notes when using RADIUS Authentication.
G.1

Using RADIUS Authentication to Access the ETERNUS DX

• RADIUS Authentication is used to authenticate logging in to the ETERNUS DX with ETERNUS Web GUI or
ETERNUS CLI.
• Up to two RADIUS servers can be connected to an ETERNUS DX.
• To use RADIUS Authentication, the user account information (user ID, password, and role) that is allowed
to access ETERNUS DX in the RADIUS server must be pre-registered.
• There are two types of authentication methods: CHAP and PAP.
• User roles are specified in the Vendor Specific Attribute (VSA) of the Access-Accept response from the
server. The following table shows the syntax of the VSA based account role on the RADIUS server.
Syntax of the Vendor Specific Attribute (VSA) based account role
Item
Type
Length
Vendor-Id
Vendor type
Vendor length
Attribute-Specific
*1: The server-side role names are case sensitive and must be set correctly.
[Example] RoleName0
Size Value
(octets)
1 26
1 7 or more
4 211
1 1
1 2 or more
1 or more ASCII characters
1070
ETERNUS Web GUI User's Guide (Settings)
Copyright 2015 FUJITSU LIMITED
Description
Attribute number for the Vendor Specific Attribute
Attribute size (calculated by server)
Fujitsu Limited (SMI Private Enterprise Code)
Eternus-Auth-Role
Attribute size described after the Vendor type
(calculated by server)
List of one or more role names assignable to
successfully authenticated users (*1)
P2X0-1270-13ENZ0