Enterasys Networks CSX7000 Manuel d'utilisateur télécharger pdf (Page 212)

100

101

USER’S GUIDE

212 CyberSWITCH

The Remote Authentication Dial-In User Service (RADIUS) is a central database supported by the

CyberSWITCH. RADIUS operates using two components: an authentication server and client

protocols. The RADIUS Server software is typically installed on a UNIX-based or NT-based system

that is local to the network. The client protocols allow the CyberSWITCH to communicate with the

RADIUS server, ultimately authenticating devices.

When enabled and properly configured, the CyberSWITCH software implements the RADIUS

client. The RADIUS client sends packets to the RADIUS Authentication Server. These packets

support the following attributes:

• User-Name

•NAS-IP-Address

• CHAP or PAP password

• Framed-Protocol

• Called-Station-Id

• Calling-Station-Id

The following is a typical scenario if the RADIUS Server is activated: when a remote device needs

to be authenticated, the system will send an access request to the primary RADIUS Server. After

the configured time interval the system will send an access request retry if the primary server does

not respond. After the configured number of retries, the system will request authentication

information from the secondary server if one is configured. The connection will be released if

neither server responds to the access requests.

The section titled On-node Device Table Security Requirements describes the device authentication

information required for each type of remote device. The information you need to configure

depends upon what you have configured for the CyberSWITCH operating mode (bridging and/or

routing), and the security options you select.

To configure the RADIUS Server itself, refer to the RADIUS Authentication Server User’s Guide. If

you have Internet access, you may obtain this guide by following the steps outlined below:

• Use your Web browser to get to the following address: http:// service.nei.com

• From the resulting screen, click on Anonymous.

•Click on the Radius directory.

•Click on the Docs directory. The guide will be under this directory.

CONFIGURING A RADIUS ACCOUNTING SERVER

Refer to the preliminary steps described in Configuring a RADIUS Authentication Server. These also

apply to RADIUS Accounting.

SING CFGEDIT

1. From CFGEDIT Main Menu, select (3) Security.

2. Select (5) Off-node Server Information.

3. Select (5) RADIUS Accounting. A screen similar to the following will display:

1 2 ... 207 208 209 210 211 212 213 214 215 216 217 ... 728 729

Commentaires sur ces manuels

Pas de commentaire

Enterasys Networks CSX7000 Manuel d'utilisateur Page 212

Commentaires sur ces manuels