beautypg.com

Radius client configuration, Configuring radius authentication and accounting, Radius proxy server configuration – Brocade Mobility RFS7000-GR Controller System Reference Guide (Supporting software release 4.1.0.0-040GR and later) User Manual

Page 422

background image

408

Brocade Mobility RFS7000-GR Controller System Reference Guide

53-1001944-01

Configuring the RADIUS Server

6

RADIUS client configuration

A RADIUS client implements a client/server mechanism enabling the switch to communicate with a
central server to authenticate users and authorize access to the switch managed network. A
RADIUS client is often an embedded device since it alleviates the need to store detailed user
information locally.

To configure RADIUS client support:

1. Select Security > RADIUS Server from the main menu.

2. Ensure the Configuration tab is selected.

3. Select the Clients tab from the bottom portion of the Configuration tab.

The Clients tab displays the IP address and subnet mask of existing RADIUS clients.

RADIUS proxy server configuration

The switch can be configured to send RADIUS requests to a proxy RADIUS server. A user's access
request is sent to a proxy server if it cannot be authenticated by a local server. The proxy server
forwards the access request to a proxy server that can authenticate the user. The proxy server
checks the information in the user access request and either accepts or rejects the request. If the
proxy target server accepts the request, it returns configuration information specifying the type of
connection service required to authenticate the user.

To configure RADIUS proxy server support:

1. Select Security > RADIUS Server from the main menu.

2. Ensure the Configuration tab is selected.

3. Select the Proxy Servers tab from the bottom of the Configuration tab.

The Proxy Servers tab displays the user ID suffix (index), IP address and port number of the
switch’s existing proxy server configurations.

4. To remove an existing RADIUS proxy server configuration from the table of configurations

available to the switch, select the configuration and click the Delete button.

Configuring RADIUS authentication and accounting

Deploy one or more RADIUS servers to manage security and retrieve accounting information from
the switch managed network. RADIUS accounting supplies administrators with user data as
RADIUS sessions are started and terminated.

To define the RADIUS authentication and accounting configuration: