Enterasys Networks CSX5500, CSX6000 Dynamic Device Option, Radius Type Configuration Elements

USER’S GUIDE

USING MANAGE MODE

offnode

Allows you to change current settings for off-node server options. You may use this command to enable the RFC2138 compliance feature.

RADIUS TYPE CONFIGURATION ELEMENTS

RADIUS TYPE

Specify the type of RADIUS implementation: Cabletron implementation or RFC2138 implementation. For preexisting systems upgraded to UAA 7.3 software, the default is Cabletron implementation. For new systems shipped with 7.3 software, the default is RFC2138.

BACKGROUND INFORMATION

The Cabletron RADIUS implementation allows the CyberSWITCH to perform device lookups in RADIUS using MAC addresses, IP addresses, and other additional methods so that it can make outbound calls using RADIUS. However, this implementation does not conform to RFC2138, in which these “special” lookups are not permitted. The CyberSWITCH now provides an alternative implementation to conform to the RFC2138 standard. This RFC2138 option disables RADIUS lookups for outbound calls.

DYNAMIC DEVICE OPTION

This feature is specific to Terminal Mode configurations. Terminal Mode connections require both device-level + user-level security configurations. With the Dynamic Device Option, you no longer need to configure separate devices for each individual user. You may configure a single default device which will apply to every user dialing in and authenticating with RADIUS, ACE, or TACACS user-level security.

CONFIGURING THE DYNAMIC DEVICE OPTION

USING CFGEDIT

1.From CFGEDIT Main Menu, select (3) Security.

2.Select (5) Off-node Server Information.

3.Select Misc Off-node Server Options.

4.Check the current setting for Dynamic Device Option.

Note: If enabled, press <RET> to exit the menu. If disabled, select the Dynamic Device Option function to enable the feature. (This selection is a simple toggle switch).

5.Return to the Misc Off-node Server Options Menu.

6.Select Dynamic Device Default Settings.

7.Provide a default device name.

8.Continue with the default device configuration just as you would for an on-node device entry. (For more information on device entries, refer to the Current Device Table.)

216 CyberSWITCH