BigIron RX Series Configuration Guide 10353-1001986-01Configuring RADIUS security 4AAA security for commands pasted into the running configurationIf AAA security is enabled on the device, commands pasted into the running configuration aresubject to the same AAA operations as if they were entered manually.When you paste commands into the running configuration, and AAA command authorization oraccounting is configured on the device, AAA operations are performed on the pasted commands.The AAA operations are performed before the commands are actually added to the runningconfiguration. The server performing the AAA operations should be reachable when you paste thecommands into the running configuration file. If the device determines that a pasted command isinvalid, AAA operations are halted on the remaining commands. The remaining commands may notbe executed if command authorization is configured.NOTESince RADIUS command authorization relies on a list of commands received from the RADIUS serverwhen authentication is performed, it is important that you use RADIUS authentication when you alsouse RADIUS command authorization.RADIUS configuration considerationsConsider the following to configure RADIUS:• You must deploy at least one RADIUS server in your network.• The device supports authentication using up to eight RADIUS servers. The device tries to usethe servers in the order you add them to the device’s configuration. If one RADIUS server is notresponding, the Brocade device tries the next one in the list.• You can select only one primary authentication method for each type of access to a device (CLIthrough Telnet, CLI Privileged EXEC and CONFIG levels). For example, you can select RADIUSas the primary authentication method for Telnet CLI access, but you cannot also selectTACACS+ authentication as the primary method for the same type of access. However, you canconfigure backup authentication methods for each access type.RADIUS configuration procedureUse the following procedure to configure a BigIron RX for RADIUS.1. Configure Brocade vendor-specific attributes on the RADIUS server. Refer to “ConfiguringBrocade-specific attributes on the RADIUS server” on page 104.2. Identify the RADIUS server to the BigIron RX. Refer to “Identifying the RADIUS server to theBigIron RX” on page 105.3. Set RADIUS parameters. Refer to “Setting RADIUS parameters” on page 106.4. Configure authentication-method lists. Refer to “Configuring authentication-method lists forRADIUS” on page 107.5. Optionally configure RADIUS authorization. Refer to “Configuring RADIUS authorization” onpage 108.6. Optionally configure RADIUS accounting. “Configuring RADIUS accounting” on page 110.
