Dell 6.2 Configuring th e RADIUS Authen tication Server

(host)(config) #ip access-list session guest
user host 10.1.1.25 svc-dhcp permit time-range working-hours
user host 10.1.1.25 svc-dns permit time-range working-hours
user alias “Internal Network” any deny
user any svc-http permit time-range working-hours
user any svc-https permit time-range working-hours
user any any deny
(host)(config) #user-role guest
session-acl guest
Creating Roles and Policies f orS ysadmin and Computer
lThe allowall policy, a predefinedpolicy, allows unrestricted access to the network.The allow all policy is mapped
to both the sysadmin user role and the computer userrole.
In theWebUI
1. Navigate to Configuration > Security > Access Control > User Roles page. Click Add to create the sysadmin
role.
2. For Role Name, enter sysadmin.
3. Under Firewall Policies, click Add. In Choose from Configured Policies, select t hepredefined allowall policy.
Click Done.
4. Click Apply.
In theCL I
(host)(config) #user-role sysadmin
session-acl allowall
Using the WebUIto create the computer role
1. Navigate to Configuration > Security > Access Control > User Roles page. Click Add to create the computer
role.
2. For Role Name, enter computer.
3. Under Firewall Policies, click Add. In Choose from Configured Policies, select t hepredefined allowall policy.
Click Done.
4. Click Apply.
Using the CLI to create the computer role
(host)(config) #user-role computer
session-acl allowall
Creating an Alias for the I nternal Network Using the CLI
(host)(config) #netdestination “Internal Network”
network 10.0.0.0 255.0.0.0
network 172.16.0.0 255.255.0.0
Configuring th e RADIUS Authen tication Server
Configurethe R ADIUS server IAS1, with IP address1 0.1.1.21 and shared key. The RADIUS server is configured to
sent an attribute calledClass to t heco ntroller;the value of this attribute is set to eit her“student,” “faculty,” or
“sysadmin” to identify the user’s group.The controller uses the literal value of this attribute to determine the role
name.
DellPowerConnect W- Series ArubaOS 6.2 | UserGuide 802.1XAuthentication |208