User's Manual

Table Of Contents
125
Users Manual of CS-6306R
6.2.4.2 Configuring Switch to Use Vendor-Specific RADIUS Attributes
The Internet Engineering Task Force (IETF) draft standard specifies a method for communicating
vendor-specific information between the network access server and the RADIUS server by using the
vendor-specific attribute (attribute 26).
Vendor-specific attributes (VSAs) allow vendors to support their own extended attributes not suitable for
general use.
For more information about vendor-IDs and VSAs, refer to RFC 2138, Remote Authentication Dial-In User
Service (RADIUS). To configure the network access server to recognize and use VSAs, use the following
command in global configuration mode:
Command Purpose
radius-servervsa send [authentication] Enables the network access server to recognize and use VSAs
as defined by RADIUS IETF attribute 26.
6.2.4.3 Specifying RADIUS Authentication
After you have identified the RADIUS server and defined the RADIUS authentication key, you must define
method lists for RADIUS authentication. Because RADIUS authentication is facilitated through AAA, you must
enter the aaa authentication command, specifying RADIUS as the authentication method. For more
information, refer to the chapter "Configuring Authentication."
6.2.4.4 Specifying RADIUS Authorization
AAA authorization lets you set parameters that restrict a user's access to the network. Authorization using
RADIUS provides one method for remote access control, including one-time authorization or authorization for
each service, per-user account list and profile, user group support, and support of IP, IPX, ARA, and Telnet.
Because RADIUS authorization is facilitated through AAA, you must issue the aaa authorization command,
specifying RADIUS as the authorization method. For more information, refer to the chapter "Configuring
Authorization."
6.2.4.5 Specifying RADIUS Accounting
The AAA accounting feature enables you to track the services users are accessing as well as the amount of
network resources they are consuming. Because RADIUS accounting is facilitated through AAA, you must
issue the aaa accounting command, specifying RADIUS as the accounting method. For more information,
refer to the chapter "Configuring Accounting."