beautypg.com

Brocade Network Advisor SAN + IP User Manual v12.3.0 User Manual

Page 676

background image

604

Brocade Network Advisor SAN + IP User Manual

53-1003155-01

Radius server configuration

13

secret

= password

shortname

= GVM1 server

}

3. Save and close the file.

Configuring user authorization for the Radius server

The user configuration file contains the individual user profiles.

1. Open the user configuration file (such as users.conf) a text editor (such as Notepad).

2. Enter the user data as follows:

user_name User-Password = "password"

NM-Roles-AORs-List = "nmRoles=management_roles; nmAORs=management_AORs"

where management_roles is one or more of the following roles (separated by commas):

Host Administrator, IP System Administrator, Network Administrator, Operator, Report User
Group, SAN System Administrator, Security Administrator, Security Officer, and Zone
Administrator

and management_AORs is one or more of the following AORs (separated by commas):

All Fabrics, All IP Products, or All Hosts

For example:

jsmith User-Password = "password"

NM-Roles-AORs-List = "nmRoles=Host Administrator,IP System

Administrator,Network Administrator,Operator,Report User Group,SAN System

Administrator,Security Administrator,Security Officer,Zone Administrator;

nmAORs=All Fabrics,All IP Products,All Hosts"

3. Enter the following to make the default authentication type PAP:

DEFAULT Auth-Type = PAP

4. Save and close the file.

Configuring the dictionary file for the Radius server

The dictionary file defines the symbolic names for Radius attributes and values.

1. Copy the Management application dictionary file (dictionary.NM_AAA_dictionary) located in the

Install_Home/docs/Auth directory to the Radius server dictionary directory.

1. Open the dictionary configuration file (dictionary.NM_AAA_dictionary) a text editor (such as

Notepad).

The dictionary file contains the following information:

VENDOR

vendor_name

vendor_id_number

BEGIN-VENDOR

vendor_name

ATTRIBUTE

NM-Roles-AORs-List

1

string

END-VENDOR

vendor_name