Authentication, Authorization and Accounting (AAA) for ERS and ES
Technical Configuration Guide
12
November 2010
avaya.com
2.3 RADIUS Server Configuration
– Using FreeRadius
The following RADIUS Server configuration is based on FreeRadius,
www.freeradius.org
. Once installed
on a Linux host, there are several configuration files to edit as shown below
2.3.1 /etc/raddb/client.conf
This file contains the NAS list with shared secret.
client 10.10.50.1 {
secret = Dda
shortname = 8600
}
client 10.10.44.5 {
secret = Dda
shortname = 4548GT-PWR
}
2.3.2 /etc/raddb/dictionary
This file contains the dictionary file for all clients. You have to create a specific dictionary file
(dictionary.nortel) for user access level and add an include statement in the /etc/raddb/dictionary file.
$INCLUDE /usr/share/freeradius/dictionary.nortel
2.3.3 /usr/share/freeradius/dictionary.nortel
This file contains specific statements for ERS 8600, 8300 and 1600.
VENDOR Nortel 1584
BEGIN-VENDOR Nortel
ATTRIBUTE Access-Priority 192 integer
VALUE Access-Priority none 0
VALUE Access-Priority ro 1
VALUE Access-Priority l1 2
VALUE Access-Priority l2 3
VALUE Access-Priority l3 4
VALUE Access-Priority rw 5
VALUE Access-Priority rwa 6
#CLI Commands
ATTRIBUTE Cli-Commands 193 string
