Technical data

152 Meru System Director Configuration Guide © 2012 Meru Networks, Inc.
Radius Authentication
9. Add administrators on the Radius server using these three levels.
Configure Radius Authentication for Administrators With the CLI
New commands to configure all controller administrators for Radius authentication
mode were introduced in System Director 4.1:
 authentication mode global
 primary-radius-ip
 primary-radius-port
 primary-radius-secret
 authentication type radius
 secondary-radius-ip
 secondary-radius-port
 secondary-radius-secret
For command details, see the Meru System Director Command Reference.
CLI Example for Setting Authentication Mode to Radius
ramcntrl(0)# configure terminal
ramcntrl(0)(config)# authentication-mode global
ramcntrl(0)(config-auth-mode)# authentication-type radius
ramcntrl(0)(config-auth-mode)# primary-radius-
primary-radius-ip primary-radius-port primary-radius-secret
ramcntrl(0)(config-auth-mode)# primary-radius-ip 172.18.1.3
ramcntrl(0)(config-auth-mode)# primary-radius-secret RadiusP
ramcntrl(0)(config-auth-mode)# secondary-radius-
secondary-radius-ip secondary-radius-port secondary-radius-secret
1
Operator is the lowest authentication level and also the default. Operators
can see statistics and results but cannot make any configuration changes.
10
Administrators can also do general configuration changes, but cannot upgrade
APs or controllers, nor can they upgrade System Director versions using Telnet.
The cannot configure an NMS server, NTP server, change the system password,
date or time (all CLI). They cannot create admins nor can they set the
authentication mode for a controller (GUI and CLI). Administrators cannot add
or remove licensing.
15
SuperUser administrators can perform all configurations on the controller.
They are the only ones who can upgrade APs or controllers and they can
upgrade System Director versions using Telnet. The can configure an NMS
server, NTP server, system password, date and time (all CLI). They can also
create admins and set the authentication mode for a controller (GUI and CLI).
Superusers can add and remove licensing.