Enabling and disabling radius, Configuring radius – Dell POWEREDGE M1000E User Manual

Page 253

Advertising
background image

Web Tools Administrator’s Guide

225

53-1001772-01

RADIUS management

17

DRAFT: BROCADE CONFIDENTIAL

If the switch database is selected as primary, there is no secondary option. The RADIUS server
cannot be configured as a backup for the switch user login database.

When the primary AAA service is RADIUS, you have three secondary service choices:

None

Switch Database when RADUIS authorization fails

Switch Database when RADIUS times out

When RADIUS login fails, even though RADIUS server is available, the additional service allows you
the option to use the Switch Database as backup authentication service when the RADIUS server is
not available. Alternatively, you can have no secondary AAA service, which means that only the
primary service is used for authentication.

Use the AAA Service tab of the Switch Administration window to manage RADIUS.

Enabling and disabling RADIUS

At least one RADIUS server must be configured before you can enable RADIUS.

Use the following procedure to enable or disable RADIUS.

1. Open the Switch Administration window as described in

“Opening the Switch Administration

window”

on page 35.

2. Select the AAA Service tab.

3. To enable RADIUS, select RADIUS from the Primary AAA Service drop-down menu.

4. Select None, Switch Database when RADIUS Login Failed, or Switch Database when RADIUS

Login Timeout from the Secondary AAA Service menu.

NOTE

To disable RADIUS, select Switch Database from the Primary AAA Service menu and select
None from the Secondary AAA Service menu.

5. Click Apply.

Configuring RADIUS

The configuration is chassis-based, so it applies to all logical switches (domains) on the switch and
it is replicated on a standby CP, if one is present. It is saved in a configuration upload, and can be
applied to other switches in a configuration download. You should configure at least two RADIUS
servers so that if one fails, the other server assumes the service.

You can configure RADIUS even if it is disabled. You can configure up to five RADIUS servers. You
must be logged in as admin, switchadmin, or securityadmin to configure RADIUS.

Use the following procedure to configure RADIUS.

1. Open the Switch Administration window as described in

“Opening the Switch Administration

window”

on page 35.

2. Select the AAA Service tab.

3. Click Add.

Advertising