Brocade Network Advisor SAN User Manual v12.3.0 User Manual

Page 498

Advertising
background image

446

Brocade Network Advisor SAN User Manual

53-1003154-01

Radius server configuration

11

For example:

client 172.26.3.76 {

secret

= password

shortname

= GVM1 server

}

3. Save and close the file.

Configuring user authorization for the Radius server

The user configuration file contains the individual user profiles.

1. Open the user configuration file (such as users.conf) a text editor (such as Notepad).

2. Enter the user data as follows:

user_name User-Password = "password"

NM-Roles-AORs-List = "nmRoles=management_roles; nmAORs=management_AORs"

where management_roles is one or more of the following roles (separated by commas):

Host Administrator, Network Administrator, Operator, Report User Group, SAN System
Administrator, Security Administrator, Security Officer, and Zone Administrator

and management_AORs is one or more of the following AORs (separated by commas):

All Fabrics or All Hosts

For example:

jsmith User-Password = "password"

NM-Roles-AORs-List = "nmRoles=Host Administrator,Network

Administrator,Operator,Report User Group,SAN System Administrator,Security

Administrator,Security Officer,Zone Administrator; nmAORs=All FabricsAll

Hosts"

3. Enter the following to make the default authentication type PAP:

DEFAULT Auth-Type = PAP

4. Save and close the file.

Configuring the dictionary file for the Radius server

The dictionary file defines the symbolic names for Radius attributes and values.

1. Copy the Management application dictionary file (dictionary.NM_AAA_dictionary) located in the

Install_Home/docs/Auth directory to the Radius server dictionary directory.

1. Open the dictionary configuration file (dictionary.NM_AAA_dictionary) a text editor (such as

Notepad).

The dictionary file contains the following information:

VENDOR

vendor_name

vendor_id_number

BEGIN-VENDOR

vendor_name

ATTRIBUTE

NM-Roles-AORs-List

1

string

END-VENDOR

vendor_name

Advertising