Dell PowerConnect B-FCXs, Configuration Manual

Page: 1232 / 1494

1190 PowerConnect B-Series FCX Configuration Guide
53-1002266-01
Configuring RADIUS security
32
Mapping a RADIUS server to individual ports
You can map up to eight RADIUS servers to each port on the Dell PowerConnect device. The port
will authenticate users using only the RADIUS servers to which the port is mapped. If there are no
RADIUS servers mapped to a port, it will use the “global” servers for authentication.
As in previous releases, a port goes through the list of servers in the order in which it was mapped
or configured, until a server that can perform the requested function is found, or until every server
in the list has been tried.
Configuration notes
•
This feature works with 802.1X and multic-device port authentication only.
•
You can map a RADIUS server to a physical port only. You cannot map a RADIUS server to a VE.
Configuration example and command syntax
To map a RADIUS server to a port, enter commands such as the following.
PowerConnect(config)#int e 3
PowerConnect(config-if-e1000-3)#dot1x port-control auto
PowerConnect(config-if-e1000-3)#use-radius-server 10.10.10.103
PowerConnect(config-if-e1000-3)#use-radius-server 10.10.10.110
With the above configuration, port e 3 would send a RADIUS request to 10.10.10.103 first, since it
is the first server mapped to the port. If it fails, it will go to 10.10.10.110.
Syntax: use-radius-server <ip-addr>
The host <ip-addr> is an IPv4 address.
Setting RADIUS parameters
You can set the following parameters in a RADIUS configuration:
•
RADIUS key – This parameter specifies the value that the Dell PowerConnect device sends to
the RADIUS server when trying to authenticate user access.
•
Retransmit interval – This parameter specifies how many times the Dell PowerConnect device
will resend an authentication request when the RADIUS server does not respond. The
retransmit value can be from 1 – 5 times. The default is 3 times.
•
Timeout – This parameter specifies how many seconds the Dell PowerConnect device waits for
a response from a RADIUS server before either retrying the authentication request, or
determining that the RADIUS servers are unavailable and moving on to the next authentication
method in the authentication-method list. The timeout can be from 1 – 15 seconds. The
default is 3 seconds.
Setting the RADIUS key
The key parameter in the radius-server command is used to encrypt RADIUS packets before they
are sent over the network. The value for the key parameter on the Dell PowerConnect device should
match the one configured on the RADIUS server. The key can be from 1 – 32 characters in length
and cannot include any space characters.
To specify a RADIUS server key, enter a command such as the following.