![background image](http://html.mh-extra.com/html/foundry-networks/switch-and-router/switch-and-router_installation-and-configuration-manual_2324275097.webp)
Securing Access to Management Functions
December 2000
3 - 33
Configuring RADIUS Security
You can use a Remote Authentication Dial In User Service (RADIUS) server to secure the following types of
access to the Foundry switch or router:
•
Telnet access
•
SSH access
•
Web management access
•
Access to the Privileged EXEC level and CONFIG levels of the CLI
NOTE:
Foundry devices do not support RADIUS security for SNMP (IronView) access.
RADIUS Authentication, Authorization, and Accounting
When RADIUS
authentication
is implemented, the Foundry device consults a RADIUS server to verify user
names and passwords. You can optionally configure RADIUS
authorization
, in which the Foundry device
consults a list of commands supplied by the RADIUS server to determine whether a user can execute a command
he or she has entered, as well as
accounting
, which causes the Foundry device to log information on a RADIUS
accounting server when specified events occur on the device.
NOTE:
In releases prior to 07.1.00, a user logging into the device via Telnet or SSH would first enter the User
EXEC level. The user could then enter the
enable
command to get to the Privileged EXEC level.
Starting with release 07.1.00, a user that is successfully authenticated by a RADIUS or server is
automatically placed at the Privileged EXEC level after login.
RADIUS Authentication
When RADIUS authentication takes place, the following events occur:
1.
A user attempts to gain access to the Foundry device by doing one of the following:
•
Logging into the device using Telnet, SSH, or the Web management interface
•
Entering the Privileged EXEC level or CONFIG level of the CLI
2.
The user is prompted for a username and password.
3.
The user enters a username and password.
4.
The Foundry device sends a RADIUS Access-Request packet containing the username and password to the
RADIUS server.
5.
The RADIUS server validates the Foundry device using a shared secret (the RADIUS key).
6.
The RADIUS server looks up the username in its database.
7.
If the username is found in the database, the RADIUS server validates the password.
8.
If the password is valid, the RADIUS server sends an Access-Accept packet to the Foundry device,
authenticating the user. Within the Access-Accept packet are three Foundry vendor-specific attributes that
indicate:
•
The privilege level of the user
•
A list of commands
•
Whether the user is allowed or denied usage of the commands in the list
The last two attributes are used with RADIUS authorization, if configured.
9.
The user is authenticated, and the information supplied in the Access-Accept packet for the user is stored on
the Foundry device. The user is granted the specified privilege level. If you configure RADIUS authorization,
the user is allowed or denied usage of the commands in the list.
Summary of Contents for Switch and Router
Page 2: ...December 2000 Copyright 2000 by Foundry Networks Inc ...
Page 26: ...Foundry Switch and Router Installation and Configuration Guide xxvi December 2000 ...
Page 64: ...Foundry Switch and Router Installation and Configuration Guide 2 34 December 2000 ...
Page 162: ...Foundry Switch and Router Installation and Configuration Guide 5 38 December 2000 ...
Page 196: ...Foundry Switch and Router Installation and Configuration Guide 6 34 December 2000 ...
Page 208: ...Foundry Switch and Router Installation and Configuration Guide 7 12 December 2000 ...
Page 236: ...Foundry Switch and Router Installation and Configuration Guide 8 28 December 2000 ...
Page 258: ...Foundry Switch and Router Installation and Configuration Guide 9 22 December 2000 ...
Page 420: ...Foundry Switch and Router Installation and Configuration Guide 13 32 December 2000 ...
Page 442: ...Foundry Switch and Router Installation and Configuration Guide 14 22 December 2000 ...
Page 554: ...Foundry Switch and Router Installation and Configuration Guide 15 112 December 2000 ...
Page 574: ...Foundry Switch and Router Installation and Configuration Guide 16 20 December 2000 ...
Page 626: ...Foundry Switch and Router Installation and Configuration Guide 17 52 December 2000 ...
Page 682: ...Foundry Switch and Router Installation and Configuration Guide 18 56 December 2000 ...
Page 826: ...Foundry Switch and Router Installation and Configuration Guide 20 20 December 2000 ...
Page 994: ...Foundry Switch and Router Installation and Configuration Guide 26 10 December 2000 ...
Page 1004: ...Foundry Switch and Router Installation and Configuration Guide B 6 December 2000 ...
Page 1044: ...Foundry Switch and Router Installation and Configuration Guide C 40 December 2000 ...
Page 1048: ...Foundry Switch and Router Installation and Configuration Guide D 4 December 2000 ...
Page 1070: ...Foundry Switch and Router Installation and Configuration Guide Index 18 December 2000 ...