Owner's Manual

480 | Chapter 17. Security
NETGEAR 8800 User Manual
eric Password = "", Service-Type = Administrative, Profile-Name = ""
Filter-Id = "unlim"
Netgear:Netgear-CLI-Authorization = Enabled
The key components of the example above are the user name, password, profile name, and
NETGEAR-CLI-Authorization VSA. For simple authentication, you only need to enter the user
name (eric in this example) and a password as described in the RADIUS server
documentation.
Enter the attributes for each user and separate them from the others with commas as
described in the RADIUS server documentation.
The Profile-Name and NETGEAR-CLI-Authorization attributes are required for command
authorization, which is optional. For more information on specifying a profile name, see
Configuring Command Authorization (RADIUS Profiles) on page 489. For more information
on the NETGEAR-CLI-Authorization VSA, see NETGEAR VSAs on page 483.
Network Login User Entries
The following is an example of a network login user entry:
Jim Auth-Type := EAP, User-Password == "12345"
Session-Timeout = 60,
Termination-Action = 1,
Netgear-Security-Profile = "user-auth LOGOFF-PROFILE=avaya-
remove;qos=\"QP1\";",
Netgear-Netlogin-Vlan = voice-avaya
The key components of the example above are the user name, password, attributes, and
NETGEAR VSAs. For simple authentication, you only need to enter the user name (Jim in
this example) and a password as described in the RADIUS server documentation.
Enter the attributes for each user and separate them from the others with commas as
described in the RADIUS server documentation.
In the example above, the Session-Timeout and Termination-Action attributes are examples
of standard RADIUS attributes, and these are described in
Standard RADIUS Attributes Used
by NETGEAR Switches on page 481. The NETGEAR-Netlogin-Vlan attributes is an example
of NETGEAR VSAs and are described in NETGEAR VSAs on page 483.
Network Login MAC Address Entries
The following is an example of a network login MAC address entry:
00040D9D12AF Auth-Type := Local, User-Password == "00040D9D12AF"
Session-Timeout = 60,
Termination-Action = 1,
Netgear-Security-Profile = "user-auth LOGOFF-PROFILE=avaya 
remove;qos=\"QP1\";",
Netgear-Netlogin-Vlan = voice-avaya