Nortel 4050, Руководство пользователя

Страница: 555 / 922

Chapter 10 Configuring system settings 555
Nortel Secure Network Access Switch 4050 User Guide
When you add an external RADIUS audit server to the configuration, the server is
automatically assigned an index number. You can add several RADIUS audit
servers, for backup purposes. Nortel SNAS 4050 auditing will be performed by an
available server with the lowest index number. You can control audit server usage
by reassigning index numbers (see
“Managing RADIUS audit servers using the
SREM” on page 559 ).
For information about configuring a RADIUS accounting server to log portal user
sessions, see
“Configuring RADIUS accounting using the SREM” on page 183 .
About the vendor-specific attributes
The RADIUS audit server uses Vendor-Id and Vendor-Type attributes in
combination to identify the source of the audit information. The attributes are sent
to the RADIUS audit server together with the event log information.
Each vendor has a specific dictionary. The Vendor-Id specified for an attribute
identifies the dictionary the RADIUS server will use to retrieve the attribute value.
The Vendor-Type indicates the index number of the required entry in the
dictionary file.
The Internet Assigned Numbers Authority (IANA) has designated SMI Network
Management Private Enterprise Codes that can be assigned to the Vendor-Id
attribute (see
http://www.iana.org/assignments/enterprise-numbers ).
RFC 2866 describes usage of the Vendor-Type attribute.
Contact your RADIUS system administrator for information about the
vendor-specific attributes used by the external RADIUS audit server.
To simplify the task of finding audit entries in the RADIUS server log, do the
following:
1 In the RADIUS server dictionary, define a descriptive string (for example,
NSNAS-SSL-Audit-Trail
).
2
Map this string to the Vendor-Type value.