Raritan Dominion SX II, Руководство администратора

Страница: 109 / 272

Chapter 6: SX II Administration
102
Cisco ACS 5.x for RADIUS Authentication
The Cisco Access Control Server (ACS) is another authentication
solution supported by the SX II.
For the SX II to support RADIUS, both the SX II and the user information
must be added into the RADIUS configuration.
If you are using a Cisco ACS 5.x server, after you have configured the
SX II for RADIUS authentication, complete the following steps on the
Cisco ACS 5.x server.
Note: The following steps include the Cisco menus and menu items used
to access each page. Please refer to your Cisco documentation for the
most up to date information on each step and more details on performing
them.
•
Add the SX II as a AAA Client ( Required ) - Network Resources >
Network Device Group > Network Device and AAA Clients
•
Add/edit users ( Required ) - Network Resources > Users and Identity
Stores > Internal Identity Stores > Users
•
Configure Default Network access to enable CHAP Protocol
(
Optional ) - Policies > Access Services > Default Network Access
•
Create authorization policy rules to control access ( Required ) -
Policy Elements > Authorization and Permissions > Network Access
> Authorization Profiles

Dictionary Type: RADIUS-IETF

RADIUS Attribute: Filter-ID

Attribute Type: String

Attribute Value: Raritan:G{Serial_Admin} (where Serial_Admin is
group name created locally on SX II). Case sensitive.
•
Configure Session Conditions (Date and Time) ( Required ) - Policy
Elements > Session Conditions > Date and Time
•
Configure/create the Network Access Authorization Policy
(
Required ) - Access Policies > Access Services > Default Network
Access>Authorization
RADIUS Communication Exchange Specifications
The SX II sends the following RADIUS attributes to your RADIUS server:
Attribute Data
Log in
Access-Request (1)
NAS-Port-Type (61) VIRTUAL (5) for network connections.