Patton electronics SmartNode Series Software Configuration Manual

Also see for SmartNode Series: Software configuration guide Software configuration guide Software configuration guide Software configuration guide

Contents

Patton electronics SmartNode Series Software Configuration Manual Manual pdf 99 page image

RADIUS configuration 99SmartWare Software Configuration Guide 8 • RADIUS Client Configurationnode(pf-auth)[remote-~]#exitnode(cfg)#node(cfg)#profile authentication local-onlynode(pf-auth)[local-o~]#method localnode(pf-auth)[local-o~]#method nonenode(pf-auth)[local-o~]#exitnode(cfg)#terminal Telnet use authentication remote-radiusnode(cfg)#terminal console use authentication local-onlynode(cfg)#show profile authenticationAuthentication Profile: defaultServer-Timeout: 10Methods:local (Type=local)none (Type=none)Authentication Profile: remote-radiusServer-Timeout: 15Methods:radius_deepblue (Type=radius)radius_extern (Type=radius)local (Type=local)Authentication Profile: local-onlyServer-Timeout: 10Methods:local (Type=local)none (Type=none)node(cfg)#Note If you do not configure AAA, a default AAA profile exists containing theAAA local as the first AAA method and the AAA none as the second. The Tel-net login and the console login service use this profile. If an emergencyoccurs, you can reload this default configuration by reloading the factoryconfiguration as described in section “Boot procedure” on page 68.RADIUS configurationRADIUS is a protocol for carrying authentication, authorization, and configuration information between anetwork access server (NAS) that desires to authenticate its links and a shared authentication server. A NASoperates as a client of RADIUS. The client is responsible for passing user information to designated RADIUSservers and then acting on the response that is returned. RADIUS servers are responsible for receiving user con-nection requests, authenticating the user, and then returning all configuration information necessary for theclient to deliver service to the user.Possible lock-out —If you delete the local and none methodsfrom the default AAA profile, or if you create and use a profilewithout methods local and none, you will be unable to accessyour device if the network or RADIUS server is not available.IMPORTANT