Local none radius name | Patton electronic SmartNode 4110 Series

SmartWare Software Configuration Guide	8 • RADIUS Client Configuration

3.Query the local database (see “Conﬁguring the local database accounts” on page 111 for information on how to conﬁgure the local database)

If, e.g. radius_deepblue is not available, radius_extern will be queried after a timeout. But if radius_deepblue gives an answer that rejects the login request, the remaining methods are not used and the login is denied. The same applies to the console service, which uses the proﬁle console-login. This proﬁle uses the following sequence of methods:

1.Ask radius server radius_deepblue.

2.Ask predeﬁned method none. This method always grants access as system operator.

If radius_deepblue is not available, access will be granted by the method none. If radius_deepblue rejects the login request, console access is denied. If radius_deepblue conﬁrms the request, console access is granted.

Do the following to conﬁgure the AAA component.

Mode: Conﬁgure

Step	Command	Purpose

1	node(cfg)#proﬁle authentication name	Creates an authentication proﬁle with name
		name and enters proﬁle authentication conﬁgura-
		tion mode.

2	node(pf-auth)[name]#method [index]	Adds an AAA method to the proﬁle. For RADIUS
	{local none {radius name}}	you have to specify a name. For information on
		how to conﬁgure local accounts and RADIUS
		servers, refer to chapter 9, “IP context overview”
		on page 114. With index you can add a method
		between to others.

3		Repeat step 2 for all AAA methods you want to
		add

4	node(pf-auth)[name]#server-timeout	Sets the timeout after that the next AAA method
	seconds	in the list is requested if no answer is received.

5	node(pf-auth)[name]#exit	Goes back to the parent conﬁguration mode

6	node(cfg)#terminal Telnet use	Speciﬁes which AAA proﬁle the Telnet login service
	authentication proﬁle-name	has to use.

7	node(cfg)#terminal console use	Speciﬁes which AAA proﬁle the console login
	authentication proﬁle-name	service has to use.

8	node(cfg)#show proﬁle authentication	Displays the conﬁgured proﬁles
	[name]

Example: Create the AAA proﬁles for login over Telnet and login over console, as they are shown in ﬁgure 15, and use them on the Telnet login and console login services.

node>enable

node#configure

node(cfg)#profile authentication remote-radius node(pf-auth)[remote-~]#method radius radius_deepblue node(pf-auth)[remote-~]#method radius radius_extern node(pf-auth)[remote-~]#method local node(pf-auth)[remote-~]#server-timeout 15

The AAA component

105

Patton electronic SmartNode 4110 Series Nodecfg#proﬁle authentication name, Nodepf-authname#exit

Models: SmartNode 4110 Series

SmartWare Software Configuration Guide

Step

node(cfg)#proﬁle authentication name

node(pf-auth)[name]#method [index]

{local none {radius name}}

node(pf-auth)[name]#server-timeout

node(pf-auth)[name]#exit

node(cfg)#terminal Telnet use

authentication proﬁle-name

node(cfg)#terminal console use

node(cfg)#show proﬁle authentication