Zhone EtherXtend 3300 Series, User Manual

Page: 61 / 150

System settings
EtherXtend User’s Guide
59
....................
Save new record? [s]ave, [c]hange or [q]uit: s
Record created.
Another method to reference the RADIUS server is by specifying the IP
address. This example specifies the radius-client 1/1 with server IP
address 172.24.36.148 and a shared-secret of
secret . The index 1/1
specifies that this profile is the first profile in group 1.
zSH> new radius-client 1/1
Please provide the following: [q]uit.
server-name: ----> {}: 172.24.36.248
udp-port: -------> {1812}:
shared-secret: --> {** password **}: secret
retry-count: ----> {5}:
retry-interval: -> {1}:
....................
Save new record? [s]ave, [c]hange or [q]uit: s
Record created.
3 Create additional radius-client profiles for each additional RADIUS
server to be assigned to this EtherXtend. The index number is
incremented (for example 1/2 for the second RADIUS server in group 1)
to specify the sequence in the profile group.
zSH> new radius-client 1/2
Please provide the following: [q]uit.
server-name: ----> {}: 172.24.36.249
udp-port: -------> {1812}:
shared-secret: --> {** password **}: secret
retry-count: ----> {5}:
retry-interval: -> {1}:
....................
Save new record? [s]ave, [c]hange or [q]uit: s
Record created.
4
In the system profile on the EtherXtend, set the desired user
authentication method and specify the index of the radius profile to use.
This examples specifies the
radiusauthindex of 1. This index is
configured with two radius-client profiles (1/1, 1/2). The EtherXtend first
attempts authentication using the server specified in radius-client 1/1. If
this authentication fails, the EtherXtend attempts authentication using
radius-client 1/2 server. If this authentication also fails, the EtherXtend
then attempts authentication based on the authentication mode setting in
the system profile. This example uses
radiusthenlocal .
Caution: If the radius authentication mode is used, local
authentication is disabled so the EtherXtend may become
inaccessible if IP connectivity to the RADIUS server is lost or
other changes prevent the EtherXtend from receiving RADIUS
authentication.