3Com Switch 4500 26-Port, Configuration Manual

Page: 384 / 396

382 A
PPENDIX
B: RADIUS S
ERVER AND
RADIUS C
LIENT
S
ETUP
b Edit the existing file
dictionary
in
/usr/local/etc/raddb
to add the
following line:
$INCLUDE dictionary.3Com
The new file
dictionary.3Com
will be used in configuring the FreeRADIUS
server
3 Locate the existing file
users
in
/usr/local/etc/raddb
and for each user
authorized to administer the Switch 4500:
a Add an entry for Switch Login. For example
user-name Auth-Type = System, 3Com-User-Access-Level =
Administrator
This indicates that the server should return the 3Com vendor specific attribute
3Com-User-Access-Level
in the Access-Accept message for that user.
b Add an entry for Network Login. For example
user-name Auth-Type := Local, User-Password == "password"
4 Run the FreeRADIUS server with
radiusd
, to turn on debugging. so you can see
any problems that may occur with the authentication:
cd /usr/local/sbin
./radiusd -sfxxyz -l stdout
Setting Up Auto VLAN and QOS using FreeRADIUS
It is slightly more complex to set up auto VLAN and QoS using FreeRADIUS, as the
dictionary file needs to be specially updated.
1 Update the
dictionary.tunnel
file with the following lines:
ATTRIBUTE Tunnel-Type 64 integerhas_tag
ATTRIBUTE Tunnel-Medium-Type 65 integerhas_tag
ATTRIBUTE Tunnel-Private-Group-Id 81 stringhas_tag
VALUE Tunnel-Type VLAN 13
VALUE Tunnel-Medium-Type TMT802 6
2 Locate the file
users
in
/usr/local/etc/raddb
and add the return list attributes
to the user. For example:
bob Auth-Type := Local, User-Password == "bob"
Tunnel-Medium-Type = TMT802,
Tunnel-Private-Group-Id = 2,
Tunnel-Type = VLAN,
Filter-Id = "profile=student"
In the example above, Tunnel-Medium-Type has been set to TMT802, to force
FreeRADIUS to treat 802 as a string requiring to be looked up in the dictionary and
return integer 6, rather than return integer 802 which would be the case if
Tunnel-Medium-Type was set to 802.
Setting Up the RADIUS
Client
This section covers the following RADIUS clients:
■
Windows 2000 Built-in Client
■
Windows XP Built-in Client
■
Aegis Client Installation