Brocade Communications Systems RFS6000 - Manual (Page 559)

Brocade Mobility RFS4000, RFS6000 and RFS7000 CLI Reference Guide 557
53-1001931-01
Radius configuration commands
19
authentication
Radius configuration commands
Configures the authentication scheme used with the RADIUS server
Supported in the following platforms:
• Mobility RFS4000 Controller
• Mobility RFS6000 Controller
• Mobility RFS7000 Controller
Syntax
authentication [data-source|eap-auth-type]
authentication data-source [ldap|local]
authentication eap-auth-type [all|peap-gtc|
peap-mschapv2|tls|ttls-md5|ttls-mschapv2|ttls-pap]
Parameters
Usage Guidelines
Set
eap-auth-type
to
all
to service RADIUS requests received from wireless clients. Setting
eap-auth-type
to
peap-gtc/peap-mschapv2
ensures
peap-gtc/peap-mschapv2
service only.
Similarly, setting
eap-auth-type
to
ttls-md5/ttls-mschapv2/ttls-pap
services all ttls
authentication requests from wireless clients.
Setting eap-auth-type to tls ensures only tls authentication is serviced.
Example
RFController(config-radsrv)#authentication eap-auth-type peap-mschapv2
RFController(config-radsrv)#
RFController(config-radsrv)#authentication data-source ldap
RFController(config-radsrv)#
authentication
data-source [ldap|local] Configures authentication
•
data-source [ldap|local] – Sets the RADIUS data source for
user authentication
•
ldap - Remote LDAP Server
•
local - Local user database
eap-auth-type [all|
peap-gtc|
peap-mschapv2|tls|
ttls-md5|ttls-mschapv2
ttls-pap] Defines RADIUS EAP and default authentication configurations
•
all – Enables TTLS and PEAP settings
•
peap-gtc – Defines the EAP and PEAP settings used with the
default authentication configuration
•
peap-mschapv2 – Sets the EAP/PEAP type used with
mschapv2
•
tls – Defines an EAP/TLS configuration scheme
•
ttls-md5 – Sets the EAP/TTLS configuration used with the
default md5 authentication scheme
•
ttls-mschapv2 – Sets the EAP/TTLS configuration used with
the default mschapv2 authentication scheme
•
ttls-pap – Sets the EAP/TTLS configuration used with the
default pap authentication scheme