236Chapter 6 Configuring authentication

Vendor-Type

Note: You can assign vendor-specific codes to the Vendor-Id and Vendor-Type attributes. The RADIUS server uses Vendor-Id and Vendor-Type attributes in combination to identify what values it will assign and send for attributes such as group name and session timeout.

Each vendor has a specific dictionary. The Vendor-Id specified for an attribute identifies the dictionary the RADIUS server will use to retrieve the attribute value. The Vendor-Type indicates the index number of the required entry in the dictionary file.

The Internet Assigned Numbers Authority (IANA) has designated SMI Network Management Private Enterprise Codes that can be assigned to the Vendor-Id attribute (see http://www.iana.org/assignments/enterprise-numbers).

RFC 2865 describes usage of the Vendor-Type attribute.

If you specify Vendor-Id and Vendor-Type on the RADIUS server and on the Nortel SNAS 4050, the Nortel SNAS 4050 will retrieve vendor-specific values for the associated attribute. If you set the Vendor-Id and Vendor-Type attributes to 0, the RADIUS server sends standard attribute values.

bLDAP servers:

server IP address

port number used for the service

configured accounts and users so that you can specify appropriate search entries and group and user attributes

Configuring authentication using the CLI

The basic steps for configuring and managing client authentication are:

1Create the authentication methods.

2Configure specific settings for the methods.

320818-A

Page 236
Image 236
Nortel Networks 4050 manual Configuring authentication using the CLI