Chapter 8:
Authentication
182
authentication service matches any local group names, the user is given permissions as configured in the
local groups.
To enable group support to be used by remote authentication services:
1.
Select
Serial & Network >
Authentication
2.
Select the relevant
Authentication Method
3.
Check the
Use Remote Groups
button
8.1.7 Remote groups with RADIUS authentication
1.
Enter the RADIUS
Authentication and Authorization Server Address
and
Server Password
2.
Click
Apply
.
3.
Edit the Radius user’s file to include group information and restart the Radius server
When using RADIUS authentication, group names are provided to the console server using the
Framed-Filter-Id attribute. This is a standard RADIUS attribute and may be used by other devices that
authenticate via RADIUS.
To interoperate with other devices using this field, the group names can be added to the end of any
existing content in the attribute, in the following format:
:group_name=testgroup1,users:
The above example sets the remote user as a member of testgroup1 and users if groups with those
names exist on the console server. Any groups which do not exist on the console server are ignored.
