3Com V6100, Руководство пользователя, Страница: 343 / 496

V6100 and V7122 User Guide
343
Setting Up a RADIUS Server
The following examples see FreeRADIUS, a free RADIUS server that can be downloaded
from
www.freeradius.org . Follow the directions on that site for information on installing and
configuring the server. If you use a RADIUS server from a different vendor, see its
appropriate documentation.
To set up a RADIUS server follow the next 5 steps:
1 Define the gateway as an authorized client of the RADIUS server, with a predefined
‘shared secret’ (a password used to secure communication) and a vendor ID. Figure 121
displays an example of the file clients.conf (FreeRADIUS client configuration).
Figure 121 Example of the File clients.conf (FreeRADIUS Client Configuration)
#
# clients.conf - client configuration directives
#
client 10.31.4.47 {
secret = FutureRADIUS
shortname = tp1610_master_tpm
}
2
If access levels are required, set up a VSA dictionary for the RADIUS server and select
an attribute ID that represents each user's access level. The following example shows a
dictionary file for FreeRADIUS that defines the attribute ‘ACL-Auth-Level’ with ID=35.
Figure 122 Example of a Dictionary File for FreeRADIUS (FreeRADIUS Client Configuration)
#
# 3Com VSA dictionary
#
VENDOR 3Com 5003
ATTRIBUTE ACL-Auth-Level 35 integer 3Com
VALUE ACL-Auth-Level ACL-Auth-UserLevel 50
VALUE ACL-Auth-Level ACL-Auth-AdminLevel 100
VALUE ACL-Auth-Level ACL-Auth-SecurityAdminLevel 200
3
In the RADIUS server, define the list of users authorized to use the gateway, using one
of the password authentication methods supported by the server implementation. The
following example shows a user configuration file for FreeRADIUS using a plain-text
password.