Cabletron Systems Cabletron CyberSWITCH CSX5500 User Manual

Also see for CyberSWITCH 5500: Quick start Manual

Contents

USER’S GUIDE212 CyberSWITCHThe Remote Authentication Dial-In User Service (RADIUS) is a central database supported by theCyberSWITCH. RADIUS operates using two components: an authentication server and clientprotocols. The RADIUS Server software is typically installed on a UNIX-based or NT-based systemthat is local to the network. The client protocols allow the CyberSWITCH to communicate with theRADIUS server, ultimately authenticating devices.When enabled and properly configured, the CyberSWITCH software implements the RADIUSclient. The RADIUS client sends packets to the RADIUS Authentication Server. These packetssupport the following attributes:• User-Name• NAS-IP-Address• CHAP or PAP password• Framed-Protocol• Called-Station-Id• Calling-Station-IdThe following is a typical scenario if the RADIUS Server is activated: when a remote device needsto be authenticated, the system will send an access request to the primary RADIUS Server. Afterthe configured time interval the system will send an access request retry if the primary server doesnot respond. After the configured number of retries, the system will request authenticationinformation from the secondary server if one is configured. The connection will be released ifneither server responds to the access requests.The section titled On-node Device Table Security Requirements describes the device authenticationinformation required for each type of remote device. The information you need to configuredepends upon what you have configured for the CyberSWITCH operating mode (bridging and/orrouting), and the security options you select.To configure the RADIUS Server itself, refer to the RADIUS Authentication Server User’s Guide. Ifyou have Internet access, you may obtain this guide by following the steps outlined below:• Use your Web browser to get to the following address: http:// service.nei.com• From the resulting screen, click on Anonymous.• Click on the Radius directory.• Click on the Docs directory. The guide will be under this directory.CONFIGURING A RADIUS A CCOUNTING SERVERRefer to the preliminary steps described in Configuring a RADIUS Authentication Server. These alsoapply to RADIUS Accounting.U SING CFGEDIT1. From CFGEDIT Main Menu, select (3) Security.2. Select (5) Off-node Server Information.3. Select (5) RADIUS Accounting. A screen similar to the following will display: