Enterasys Matrix E6 5G102-06-G, User Manual

Page: 171 / 196

Configuring the Radius Client
Configuring and Monitoring the Switch 11-15
2. If Radius accepts your attempt to access Local Management, you will have access to Local
Management.
3. If the Radius client rejects your attempt, you will not have access regardless of the LRA setting.
4. If the Radius client times out, then depending on your Local Radius Access settings, you
a. have access with an ACCEPT configuration,
b. do not have access with REJECT , or
c. your password is checked against the local passwords with CHALLENGE .
The “last resort” platform action in case of RADIUS server time-out for both local and remote
access is selectable for each type of access:
• local login via the COM port, or
• remote login via a remote network TELNET connection.
11.18.2 Setting the Local and Remote Servers
Before setting the parameters, refer to Section 9.1.1 and Section 9.1.2 for a better understanding of
Radius Servers and Last Resort Authentication.
To set the local and remote server, configure the following fields on the
Security Configuration
screen, described in
Section 9.2 :
NOTE: It is recommended that you administer a password. The RADIUS client is coded
to reject a blank password without querying the server, so the LRA action will never be
applied even if the server is not present. If the LRA is set to
ACCEPT , an invalid,
non-null username/password pair will allow access assuming the RADIUS server is not
present.
NOTE: Initially, the Radius function is disabled. Before enabling Radius, all VLANs must
be pre-configured prior to using the port authentication policy. Currently, only EAP
authentication is supported.
NOTE: To configure the Radius client, EAPOL must be disabled using the Security
Configuration screen, described in Section 9.2 .