Avaya P580 User Manual

Page 82

Advertising
background image

2-24

Avaya P550R, P580, P880, and P882 Multiservice Switch User Guide, Version 5.3.1

Chapter 2

6. Select the scroll arrow located on the right of the Access List

field. The custom access list names you created will display.

7. Select a custom access list name for the user.

8. Select Apply to give the user the access type or select Cancel

to ignore.

Remote Authentication Dial-In User Service
(RADIUS) Client Support

Overview of
RADIUS

In a network with many Avaya switches, it can become difficult to
keep track of all of the user accounts on each of the switches. You
can centralize the user accounts by using a RADIUS server.

RADIUS is a service that authenticates users when they attempt to
log into a Network Access Device (NAD) such as an Avaya switch.
RADIUS typically runs on a Windows or Linux server however, it
can run on other platforms as well depending upon the vendor.

RADIUS is a client/server architecture where each device that uses
the RADIUS server is a RADIUS client. The client sends an Access
Request messages to the RADIUS server. These messages include the
user’s login name, the password encrypted, and optional parameters
depending on configuration.

* Note: It is critical that the RADIUS Client and Server be

configured with the exact same parameters.

Once received, the RADIUS server will look through its database for
the user account. If it finds an account, the password is correct, and
the optional parameters match, an Access Accepted message is
returned to the RADIUS client indicating that the user account
exists, the password was correct, and the user has a certain access
type (for example: Administrative or Read-Only). If not found, the
password is incorrect, or the optional parameters don’t match, then
an Access Rejected message is sent.

Standard
RADIUS

A standard RADIUS configuration provides two types of access
(a.k.a. Service-Types): Administrative or Read-Only. This happens
when a Group name is not specified and no additional parameters
are configured on the RADIUS server for the user account. In the
case of the Avaya switch, this implies that a user is given
Administrative or Read-Only access. The Avaya switch includes a
third type of access, Read-Write, which cannot create other user
accounts but can configure the switch. If you are using a Standard

Advertising
This manual is related to the following products: