SmartConnect User’s Guide

RADIUS Attributes for VSE SmartConnect Software User Privileges

When the user logs in, the switch authenticates the appropriate level of access by sending the RADIUS access request (the client authentication request) to the RADIUS authentication server.

If the remote user is successfully authenticated by the authentication server, the switch verifies the privileges of the remote user and authorize the appropriate access. The administrator has an option to allow backdoor access via Telnet. By default, Telnet access is disabled.

Note – To obtain the RADIUS backdoor password for your switch, contact your Service and Support line.

All user privileges, other than those assigned to the Administrator, have to be defined in the RADIUS dictionary. RADIUS attribute 6 (built into all RADIUS servers) defines the adminis- trator. The file name of the dictionary is RADIUS vendor-dependent. The following RADIUS attributes are defined for switch user privileges levels:

Table 6-3SmartConnect-Proprietary Attributes for RADIUS

User Name/Access

User-Service-Type

Value

 

 

 

User

Vendor-supplied

255

 

 

 

Operator

Vendor-supplied

252

 

 

 

Admin

Vendor-supplied

250

 

 

 

BMD00082, February 2009

Chapter 6: Configuring Switch Access „ 73

Page 75
Image 75
IBM Partner Pavilion BMD00082 3SmartConnect-Proprietary Attributes for Radius, User Name/Access User-Service-Type Value