User guide

3-16 E
XTREME
W
ARE
S
OFTWARE
U
SER
G
UIDE
M
ANAGING THE
S
WITCH
RADIUS RFC 2138 ATTRIBUTES
The RADIUS RFC 2138 optional attributes supported are as follows:
• User-Name
• User-Password
• Service-Type
• Login-IP-Host
RADIUS S
ERVER CONFIGURATION EXAMPLE (MERIT)
Many implementations of RADIUS server use the publicly available “Merit
©
AAA”
server application, available on the World Wide Web at:
http://www.merit.edu/aaa
Included below are excerpts from relevant portions of a sample Merit RADIUS server
implementation. The example shows excerpts from the client and user configuration
config radius-accounting [primary | secondary]
shared-secret <string>
Configures the authentication string used
to communicate with the RADIUS
accounting server.
disable radius Disables the RADIUS client.
disable radius-accounting Disables RADIUS accounting.
enable radius Enables the RADIUS client. When
enabled, all Web and CLI logins are sent
to the RADIUS servers for authentication.
When used with a RADIUS server that
supports ExtremeWare CLI authorization,
each CLI command is sent to the RADIUS
server for authentication before it is
executed.
enable radius-accounting Enables RADIUS accounting. The RADIUS
client must also be enabled.
show radius Displays the current RADIUS and RADIUS
accounting client configuration and
statistics.
Table 3- 2: RADIUS Commands (continued)
Command Description