Configuring a radius client using the cli – Avaya P580 User Manual

Page 89

Advertising
background image

Avaya P550R, P580, P880, and P882 Multiservice Switch User Guide, Version 5.3.1

2-31

Initialize and Setup

Configuring a
RADIUS Client
Using the CLI

To configure a RADIUS client using the CLI, enter the following
command from Enable/Configure mode:

<configure># set radius authentication

<parameters>

Refer to the Command Reference Guide for the Avaya P550R, P580, P880,
and P882 Multiservice Switches, Version 5.3
for more details about this
command.

Group

Enter the ASCII Group name.The Group name will be
included in the Access Request message sent to the
RADIUS server.

This implies that user accounts are configured with a
Group name on the RADIUS server and that the Vendor
Specific Attributes are set for the user accounts.

(See also Avaya-Service-Type-Required below)

Retry Number

Enter the number of times to re-send the Access Request
message if there is no response.

Retry Time

Enter the time (in seconds) to wait before re-sending an
Access Request message.

UDP Port

Enter the UDP port number. The default value is 1812.
Valid options are 1812 or 1645 only.

Avaya-Service-Type
Required

If enabled, the switch will only honor Access Accept
messages that have the correct Group name included. This
setting prevents the switch from incorrectly allowing
access to users that may have a user account on the
RADIUS server but should not be allowed access to the
switch.

This could occur if user “Bob” has a Standard RADIUS
user account with Administrator (or Read-Only)
privileges. When Bob logs in, the RADIUS server will
authenticate him and respond with an Access Accept
message of Administrator but will not include the VSAs
and Group name associated with the Avaya switch. This
implies anyone who has a Standard Account will be able
to log into the Avaya switch.

By enabling this setting and explicitly configuring user
accounts with the Avaya specific attributes and Group
name, you will have tighter control over the security of
the Avaya switch.

Table 2-6. RADIUS Dialog Box Configuration Parameters

Parameter

Definition

2 of 2

Advertising
This manual is related to the following products: