Enterasys Matrix-V V2H124-24P, Configuration Manual

Page: 324 / 498

Command Line Interface
4-90
4
radius-server service-type
This command instructs the switch to send the Filter ID to the RADIUS server during
authentication. Use the
no form to disable this feature.
Syntax
[ no ] radius-server service-type
Default Setting
Enabled
Command Mode
Global Configuration
Command Usage
• Some RADIUS servers do not support the Filter ID attribute. Be sure you
disable this attribute if the RADIUS server you are using does not support the
Filter ID attribute.
• The RADIUS server “user” or other corresponding file should be configured
with the following attribute if you want it to process the Filter ID sent by the
switch during authentication:
“ Enterasys : version =n: mgmt =xx” according to the following rule:
–> “ Enterasys ” is a required keyword and must be positioned first.
–> “ version ” is a required keyword and specifies the Filter-ID syntax version.
(Currently n=1 is the only value supported.)
–> “
mgmt ” identifies the management privilege level.
(Currently only management logins are supported.)
–> “xx” takes one of the following values:
- “su” for administrator access right (privilege level 15).
- “rw” for administrator access right (privilege level 15).
- “ro” for guest access right (privilege level 0).
• If there is no Filter-ID attribute or the value of Filter-ID is not well-formed, the
Service-Type attribute will determine the access level. A Service-Type
attribute with the value of Administrative, NAS-Prompt or Authenticate-Only
indicates administrator or guest access rights (depending on the Filter-ID),
others indicate that management access will be denied. If there is no
Filter-ID attribute, or no “mgmt=” field exists in the Filter-ID, the Service-Type
attribute will determine the access level. If the Service-Type is not encoded,
then management access will be denied. A Service-Type attribute with the
value of NAS-Prompt or Administrative-User indicates administrator access
rights, others indicate guest access rights. The authentication levels based
on the Filter ID and Service Type are listed in the following table.