Enterasys D-Series Specifications Page 468

  • Download
  • Add to my manuals
  • Print
  • Page
    / 540
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 467
set radius
17-6 Security Configuration
Defaults
Ifsecretvalueisnotspecified,nonewillbeapplied.
Ifrealmisnotspecified,theanyaccessrealmwillbeused.
Mode
Switchcommand,readwrite.
Usage
TheDSeriesdeviceallowsupto10RADIUSaccountingserverstobeconfigured,withuptotwo
serversactiveatanygiventime.
TheRADIUSclientcanonlybeenabledontheswitchonceaRADIUSserverisonline,anditsIP
address(es)hasbeenconfiguredwiththesamepassword
theRADIUSclientwilluse.
Examples
ThisexampleshowshowtoenabletheRADIUSclientforauthenticatingwithRADIUSserver1at
IPaddress192.168.6.203,UDPauthenticationport1812,andanauthenticationpasswordof
“pwsecret.”Aspreviouslynoted,the“serversecret”passwordenteredheremustmatchthat
alreadyconfiguredastheReadWrite(rw)passwordonthe
RADIUSserver:
D2(su)->set radius server 1 192.168.6.203 1812 pwsecret
ThisexampleshowshowtosettheRADIUStimeoutto5seconds:
D2(su)->set radius timeout 5
ThisexampleshowshowtosetRADIUSretriesto10:
D2(su)->set radius retries 10
realm
management
access|any|
networkaccess
RealmallowsyoutodefinewhohastogothroughtheRADIUSserverfor
authentication.
managementaccess:Thismeansthatanyonetryingtoaccesstheswitch
(Telnet,SSH,LocalManagement)hastoauthenticatethroughthe
RADIUSserver.
networkaccess:Thismeansthat
alltheusershavetoauthenticatetoa
RADIUSserverbeforetheyareallowedaccesstothenetwork.
any:Meansthatbothmanagementaccessandnetworkaccesshave
beenenabled.
Note: If the management-access or any access realm has been configured, the
local “admin” account is disabled for access to the switch using the console, Telnet,
or Local Management. Only the network-access realm allows access to the local
“admin” account.
index|all Appliestherealmsettingtoaspecificserverortoallservers.
Note: If RADIUS is configured with no host IP address on the device, it will use the loopback
interface 0 IP address (if it has been configured) as its source for the NAS-IP attribute. For
information about configuring loopback interfaces, refer to “interface” on page 16-3.
Page view 467
1 2 ... 463 464 465 466 467 468 469 470 471 472 473 ... 539 540

Comments to this Manuals

No comments