![background image](http://html.mh-extra.com/html/foundry-networks/switch-and-router/switch-and-router_installation-and-configuration-manual_2324275104.webp)
Foundry Switch and Router Installation and Configuration Guide
3 - 40
December 2000
NOTE:
For examples of how to define authentication-method lists for types of authentication other than RADIUS,
see “Configuring Authentication-Method Lists” on page 3-47.
Configuring RADIUS Authorization
Foundry devices support RADIUS authorization for controlling access to management functions in the CLI. When
RADIUS authorization is enabled, the Foundry device consults the list of commands supplied by the RADIUS
server during authentication to determine whether a user can execute a command he or she has entered.
You enable RADIUS authorization by specifying a privilege level whose commands require authorization. For
example, to configure the Foundry device to perform authorization for the commands available at the Super User
privilege level (that is; all commands on the device), enter the following command:
BigIron(config)# aaa authorization commands 0 default radius
Syntax:
aaa authorization commands <privilege-level> default radius | | none
The <privilege-level> parameter can be one of the following:
•
0
– Authorization is performed (that is, the Foundry device looks at the command list) for commands available
at the Super User level (all commands)
•
4
– Authorization is performed for commands available at the Port Configuration level (port-config and read-
only commands)
•
5
– Authorization is performed for commands available at the Read Only level (read-only commands)
NOTE:
RADIUS authorization is performed only for commands entered from Telnet or SSH sessions. No
authorization is performed for commands entered at the console, the Web management interface, or IronView.
NOTE:
Since RADIUS authorization relies on the command list supplied by the RADIUS server during
authentication, you cannot perform RADIUS authorization without RADIUS authentication.
NOTE:
A user’s privilege level is set during RADIUS authentication, not with an
aaa authorization
command.
The command
aaa authorization exec default radius
is ignored by the system.
Configuring RADIUS Accounting
Foundry devices support RADIUS accounting for recording information about user activity and system events.
When you configure RADIUS accounting on a Foundry device, information is sent to a RADIUS accounting server
when specified events occur, such as when a user logs into the device or the system is rebooted.
Configuring RADIUS Accounting for Telnet/SSH (Shell) Access
To send an Accounting Start packet to the RADIUS accounting server when an authenticated user establishes a
Telnet or SSH session on the Foundry device, and an Accounting Stop packet when the user logs out:
BigIron(config)# aaa accounting exec default start-stop radius
Syntax:
aaa accounting exec default start-stop radius | | none
none
Do not use any authentication method. The device automatically
permits access.
Table 3.5: Authentication Method Values (Continued)
Method Parameter
Description
Summary of Contents for Switch and Router
Page 2: ...December 2000 Copyright 2000 by Foundry Networks Inc ...
Page 26: ...Foundry Switch and Router Installation and Configuration Guide xxvi December 2000 ...
Page 64: ...Foundry Switch and Router Installation and Configuration Guide 2 34 December 2000 ...
Page 162: ...Foundry Switch and Router Installation and Configuration Guide 5 38 December 2000 ...
Page 196: ...Foundry Switch and Router Installation and Configuration Guide 6 34 December 2000 ...
Page 208: ...Foundry Switch and Router Installation and Configuration Guide 7 12 December 2000 ...
Page 236: ...Foundry Switch and Router Installation and Configuration Guide 8 28 December 2000 ...
Page 258: ...Foundry Switch and Router Installation and Configuration Guide 9 22 December 2000 ...
Page 420: ...Foundry Switch and Router Installation and Configuration Guide 13 32 December 2000 ...
Page 442: ...Foundry Switch and Router Installation and Configuration Guide 14 22 December 2000 ...
Page 554: ...Foundry Switch and Router Installation and Configuration Guide 15 112 December 2000 ...
Page 574: ...Foundry Switch and Router Installation and Configuration Guide 16 20 December 2000 ...
Page 626: ...Foundry Switch and Router Installation and Configuration Guide 17 52 December 2000 ...
Page 682: ...Foundry Switch and Router Installation and Configuration Guide 18 56 December 2000 ...
Page 826: ...Foundry Switch and Router Installation and Configuration Guide 20 20 December 2000 ...
Page 994: ...Foundry Switch and Router Installation and Configuration Guide 26 10 December 2000 ...
Page 1004: ...Foundry Switch and Router Installation and Configuration Guide B 6 December 2000 ...
Page 1044: ...Foundry Switch and Router Installation and Configuration Guide C 40 December 2000 ...
Page 1048: ...Foundry Switch and Router Installation and Configuration Guide D 4 December 2000 ...
Page 1070: ...Foundry Switch and Router Installation and Configuration Guide Index 18 December 2000 ...