Radius Server Configuration | Q-Logic 5602 specs

Section 10

RADIUS Server Configuration

NOTE: RADIUS server configuration requires the Fabric Security license key. To purchase a license key, contact your authorized maintenance provider or authorized reseller.

Authentication can be performed locally using the switch’s security database, or remotely using a Remote Dial-In User Service (RADIUS) server such as Microsoft RADIUS. With a RADIUS server, the security database for the entire fabric resides on the server. In this way, the security database can be managed centrally, rather than on each switch. You can configure up to five RADIUS servers to provide failover.

You can configure the RADIUS server to authenticate just the switch or both the switch and the initiator device if the device supports authentication. When using a RADIUS server, every switch in the fabric must have a network connection. A RADIUS server can also be configured to authenticate user accounts. Refer to Section 3 for information about user accounts. A secure connection is required to authenticate user logins with a RADIUS server. Refer to Section 8 for information about secure connections.

This section describes the following tasks:

Displaying RADIUS Server Information

Configuring a RADIUS Server on the Switch

59183-01 A

10-1

Image 113

Q-Logic 5602 manual Radius Server Configuration

Contents

Firmware Version Document Revision History Table of Contents Section Port Configuration Section Zoning Configuration Section Device Security Configuration Connection Security ConfigurationRadius Server Configuration Add Members to an Alias Remove Members from an Alias Simple Network Management Protocol Configuration Event Log ConfigurationCommand Reference Section 59183-01 a Index List of Tables Introduction Related Materials Switch Models and ExamplesIntended Audience New in This Release Training Technical SupportAvailability Support Headquarters Contact Information Introduction Technical Support 59183-01 a This section describes the following tasks Command Line Interface Usage To log off, enter the Exit command Logging In to the Switch Command-Line Completion Opening and Closing an Admin SessionEntering Commands Getting Help Setting Page Breaks Local directory now /itasca/conf/images bin Creating a Support File Ftp Downloading and Uploading Files Userimages password images Factory User Accounts User Account Configuration Displaying User Account Information Creating User Accounts Following example deletes the user account named user3 Modifying User Accounts and Passwords Network and Fabric Configuration Displaying Name Server Information WWN Displaying the Ethernet Network Configuration Configuring the Ethernet Port Following is an example of a connection failure Verifying a Switch in the NetworkVerifying and Tracing Fibre Channel Connections Port Switch configuration consists of the following tasks Displaying Switch Information Switch Operational Information PID Ppid CPU Time System Process Information Elapsed Time Between Resets Switch Configuration Parameters Configuration Information Security Configuration Parameters Zoning Configuration Parameters Heartbeat LED Activity Hardware Information Firmware Information Managing Switch Services Please Note Activate a Switch Configuration Managing Switch ConfigurationsDisplay a List of Switch Configurations Modify a Switch Configuration Copy a Switch ConfigurationDelete a Switch Configuration Decimal value, 100-100000 msec Creating the Backup File Back Up and Restore a Switch Configuration Downloading the Configuration File Ftp ipaddress user images password images ftp bin Restoring the Configuration File Setting the Date and Time Paging a Switch Switch Configuration Setting the Date and Time List Switch Reset Methods Resetting a SwitchInstalling Firmware Nondisruptive Activation One-Step Firmware Installation Enter the password for your account name FTP only Wait for the unpack to complete Custom Firmware Installation Display Feature Licenses Managing Switch Feature Upgrades Install a Feature License Key Page You can display the following port information Displaying Port InformationThis section describes the following topics Arbff Port Configuration Parameters PL-XPL-VC-SG3-22 Port Operational Information Port Threshold Alarm Configuration Parameters Port Performance FTRJ8524P2BNL Transceiver Information Set config port Modifying Port Operating Characteristics Port Binding SANbox admin-config # set config security port Resetting a Port Configuring Port Threshold Alarms SANbox admin-config # set config threshold Online Tests for Ports Testing a Port Offline Tests for Ports Display Port Test Results Cancel a Port Test Current value Extending Port Transmission Distance SANbox # show donor Port Config Zoning Configuration Displaying Zoning Database Information Configured Zone Set Information SANbox # zoning list Active ZoneSet Information Active Zone Set Information Zone Membership Information Zone Set Membership Information Alias and Alias Membership Information Zoning Modification History E2JBOD2 Zoning Database Limits Configuring the Zoning Database SANbox # admin start SANbox admin # config edit Modifying the Zoning Database Removing Inactive Zone Sets, Zones, and Aliases Resetting the Zoning Database Create a Zone Set Managing Zone SetsDelete a Zone Set Managing Zone Sets consists of the following tasks Copy a Zone Set Rename a Zone SetAdd Zones to a Zone Set Remove Zones from a Zone Set Managing Zones Deactivate a Zone SetCreate a Zone Delete a Zone Copy a Zone Rename a ZoneAdd Members to a Zone Remove Members from a Zone Create an Alias Managing AliasesDelete an Alias Rename an Alias Remove Members from an Alias Copy an AliasAdd Members to an Alias Managing SSL and SSH Services Connection Security Configuration TelnetEnabled True / False SSHEnabled Creating an SSL Security Certificate Displaying SSL and SSH ServicesPage Device Security Configuration Displaying Security Database Information Configured Security Set Information MD5 Active Security Set Information Group Membership Information Security Set Membership Information Security Database Limits Security Database Modification History Set Config Security command Configuring the Security Database Before Reaching the end of the list Modifying the Security Database Resetting the Security Database Create a Security Set Managing Security SetsDelete a Security Set Rename a Security Set Remove Groups from a Security Set Add Groups to a Security SetActivate a Security Set Deactivate a Security Set Create a Group Managing GroupsDelete a Group Rename a Group Add Members to a Group Copy a Group Remove Members from a Group Modify a Group Member Radius Server Configuration Displaying Radius Server Information Configuring a Radius Server on the Switch Page Starting and Stopping Event Logging Event Log Configuration Displaying the Event Log Controlling Messages in the Output Stream Filtering the Event Log Display Configure the Event Log Managing the Event Log Configuration Clearing the Event Log Display the Event Log ConfigurationRestore the Event Log Configuration Logging to a Remote Host Creating and Downloading a Log File Page You control the Snmp service SNMPEnabled parameters through Managing the Snmp Service 12-2 59183-01 a Displaying Snmp Information Modifying the Snmp Configuration SANbox admin # reset snmp Resetting the Snmp ConfigurationPage Access Authority Command Reference Syntax and Keywords Command Commands are listed in alphabetical order as follows Command Listing Authority AdminSyntax Keywords Syntax alias AliasKeywords add alias memberlist Copy aliassource aliasdestination List Delete aliasMembers alias Remove alias memberlist Keywords activate configname ConfigSyntax config Save configname Edit confignameRestore 59183-01 a 13-9 Support CreateKeywords certificate 59183-01 a 13-11 SANbox admin # create support Following is an example of the Create Certificate command Keywords MMDDhhmmCCYY DateSyntax date Closes the Telnet session ExitAuthority None Syntax exit Keywords address FcpingAuthority None Hopcount FctracePortdestination Examples The following is an example of the Fctrace command Syntax feature FeatureAdd licensekey log Keywords add licensekey Following is an example of the Feature Log command Syntax firmware install Firmware Install 59183-01 a 13-21 Syntax group Group ISL Group Member Attributes Keywords add group Port Group Member Attributes MS Group Member Attributes Configures security for attachments to other switchesCopy groupsource groupdestination Create group type Group Member Attributes Edit group member Remove group memberlist Members groupRename groupold groupnew Securitysets group Following is an example of the Group Edit command Following is an example of the Group Members command Following is an example of the Group List command Syntax hardreset Hardreset Command Help command keywordHelp Keyword Following is an example of the History command Re-execute selected commandsHistory History Hotreset Hotreset Syntax image Keywords cleanupImage Unpack file 13-36 59183-01 a Lip Following is an example of the Lip commandReinitializes the specified loop port Lip portnumber Authority None Syntax logout Logout Syntax passwd accountname Keywords accountname Passwd Ipaddress PingPing ipaddress Displays current system process information Examples The following is an example of the Ps commandAuthority None Syntax ps Authority None Syntax quit Quit Keywords config configname ResetSyntax reset Factory ServicesPort portlist Radius Workstation could lose communication with the switch SwitchSystem Zoning Values Switch Configuration Defaults Parameter 4-Gbps Port Defaults Port Configuration Defaults Port Threshold Alarm Configuration Defaults Snmp Configuration Defaults Zoning Configuration Defaults 11. Services Configuration Defaults 10. Radius Configuration Defaults 13. Security Configuration Defaults 12. System Configuration Defaults Clear SecurityKeywords active Save EditLimits Following is an example of the Security History command Following is an example of the Security List command Following is an example of the Security Limits command Syntax securityset SecuritysetKeywords activate securityset Active Create securityset Copy securitysetsource securitysetdestinationDeactivate Delete securityset Following is an example of the Securityset List command Following is an example of the Securityset Groups command Syntax set alarm option Set AlarmKeywords option Option can be one of the following State Set BeaconSet beacon state 14. Port Configuration Parameters Set Config PortKeywords port portnumber Ports portnumber Send Arbff True instead of IDLEs False on the loop 14. Port Configuration Parameters 14. Port Configuration Parameters 59183-01 a 13-65 13-66 59183-01 a 15. Security Configuration Parameters Set Config SecuritySyntax set config security 13-68 59183-01 a 16. Port Binding Configuration Parameters Set Config Security Portbinding 17. Switch Configuration Parameters Set Config SwitchSyntax set config switch Resource Allocation Timeout Value. The number of millisec 18. Port Alarm Threshold Parameters Set Config ThresholdSyntax set config threshold Following is an example of the Set Config Threshold command Error rate has fallen below the falling trigger 19. Zoning Configuration Parameters Set Config ZoningSyntax set config zoning 59183-01 a 13-75 Set log Set LogArchive Component filterlist Display filter Level filter Disables monitoring on all portsMonitors none of the severity levels Specifies all ports Start Alarms are always logged and always displayed on the screenStop Stops logging of events Syntax pagebreak state Set PagebreakKeywords state 59183-01 a 13-81 Set Port EnableSet port clear Set port portnumber State state Speed transmissionspeed Configures Radius servers on the switch Set Setup RadiusSet setup radius Configuration fields 20. Radius Service Settings 13-86 59183-01 a Configures services on the switch Set Setup ServicesSyntax set setup services 21. Switch Services Settings 21. Switch Services Settings 59183-01 a 13-89 Configures Snmp on the switch Set Setup SnmpSyntax set setup snmp 22. Snmp Configuration Settings 22. Snmp Configuration Settings 13-92 59183-01 a 23. System Configuration Settings Set Setup SystemSyntax set setup system 13-94 59183-01 a Admin session Set Switch StateSet switch state state State can be one of the following Set timezone Set Timezone Show about Show AboutAuthority None Syntax Show alarm Show AlarmSettings Following is an example of the Show Alarm command Syntax show broadcast Show Broadcast Show chassis Displays chassis component status and temperatureShow Chassis Displays configuration parameters for one or more ports Show Config PortShow config port portnumber Portnumber 13-102 59183-01 a Syntax show config security Show Config SecurityDisplays the security database configuration parameters Show config security portbinding portnumber Show Config Security Portbinding Syntax show config switch Show Config SwitchDisplays the switch configuration parameters Syntax show config threshold Show Config ThresholdDisplays alarm threshold parameters for the switch Syntax show config zoning Show Config ZoningDisplays zoning configuration parameters for the switch Syntax show domains Show Domains Show donor Show Donor Show fabric Show Fabric Show fdmi portwwn Show FdmiPortwwn Question marks ? Following is an example of the Show Fdmi WWN command Syntax show interface Show InterfaceDisplays the status of the active network interfaces Show log Show LogNumberofevents Component Options Level Following is an example of the Show Log Level command SettingsFollowing is an example of the Show Log Options command Port Show lsdb Show LsdbDisplays Link State database information Show Media InstalledShow media Portlist 25. Transceiver Information 13-120 59183-01 a 59183-01 a 13-121 Show Mem Following is an example of the Show Mem commandDisplays information about memory activity Show mem count Option Show NSShow ns option Following is an example of the Show NS portID command Syntax show pagebreak Displays the current pagebreak settingShow Pagebreak Syntax show perf portlist Show PerfKeywords portlist Byte portlist Outbyte portlist Errors portlistFrame portlist Inframe portlist Following is an example of the Show Perf Byte command 26. Show Port Parameters Show PortShow port Lipalpdalps LIPF7F7 26. Show Port Parameters 59183-01 a 13-133 Syntax show post log Show Post Log Syntax show setup mfg Show Setup MfgDisplays manufacturing information about the switch Displays Radius server information Show Setup RadiusSyntax show setup radius Syntax show setup services Show Setup ServicesDisplays switch service status information Displays the current Snmp settings Show Setup SnmpSyntax show setup snmp Following is an example of the Show Setup Snmp command Syntax show setup system Show Setup SystemDisplays the current system settings Domainid Show SteeringShow steering domainid Displays switch operational information Show SwitchShow switch 27. Switch Operational Parameters 13-142 59183-01 a Syntax show timezone Displays the current time zone settingShow Timezone Syntax show topology Show TopologyDisplays all connected devices 59183-01 a 13-145 Show users Show Users Show Version Syntax shutdown Shutdown Port portnumber Test CancelTest cancel Syntax test port portnumber Test PortOffline loopbacktype Online 28. Port Test Parameters 13-152 59183-01 a Test status Test Status Authority None Syntax uptime Examples The following is an example of the Uptime commandUptime Syntax user UserKeywords accounts Add Following is an example of the User Edit command Following is an example of the User Add command Following is an example of the User List command Following is an example of the User Delete command Authority None Syntax whoami Examples The following is an example of the Whoami commandWhoami Syntax zone ZoneKeywords add zone memberlist Copy zonesource zonedestination Members zone Delete zoneRemove zone memberlist Rename zoneold zonenew Following is an example of the Zone Members command Following is an example of the Zone Zonesets command Syntax zoneset Zoneset Remove zoneset zonelist Delete zonesetRename zonesetold zonesetnew Zones zoneset Following is an example of the Zoneset Zones command Following is an example of the Zoneset List command Delete orphans ZoningSyntax zoning 29. Zoning Database Limits Opens a Zoning Edit session 13-168 59183-01 a Following is an example of the Zoning Limits command Following is an example of the Zoning List command Index Index-2 59183-01 a FTP See File Transfer Protocol Example Index-4 59183-01 a 59183-01 a Index-5 Index-6 59183-01 a Set Config Security Port command Show Config Security Port command 59183-01 a Index-9 Index-10 59183-01 a 59183-01 a Index-11