Configuring a Radius Server on the Switch | Q-Logic 5602 manual

A

10 – RADIUS Server Configuration Configuring a RADIUS Server on the Switch

10.2

Configuring a RADIUS Server on the Switch

Enter the Set Setup Radius command to configure a RADIUS server on the switch as shown in the following example. Refer to Table 13-20for a description of the RADIUS server configuration parameters.

SANbox (admin) #> set setup radius

A list of attributes with formatting and current values will follow.

Enter a new value or simply press the ENTER key to accept the current value.

If you wish to terminate this process before reaching the end of the attributes for the server being processed, press 'q' or 'Q' and the ENTER key to do so.

If you wish to terminate the configuration process		completely, press 'qq' or
'QQ' and the ENTER key to so do.
DeviceAuthOrder	(1=Local, 2=Radius, 3=RadiusLocal) [Local]
UserAuthOrder	(1=Local, 2=Radius, 3=RadiusLocal) [Local]
TotalServers	(decimal value, 0-5)	[1	]
Server: 1
ServerIPAddress	(dot-notated IP Address)	[10.20.11.8]
ServerUDPPort	(decimal value)	[1812	]
DeviceAuthServer	(True / False)	[True	]
UserAuthServer	(True / False)	[True	]
AccountingServer	(True / False)	[False	]
Timeout	(decimal value, 10-30 secs)	[10	]
Retries	(decimal value, 1-3, 0=None)	[0	]
SignPackets	(True / False)	[False	]
Secret	(1-63 characters, recommend 22+)	[**********]

Do you want to save and activate this radius setup? (y/n): [n]

59183-01 A

10-3

Image 115

Q-Logic 5602 manual Configuring a Radius Server on the Switch

Contents

Firmware Version Document Revision History Table of Contents Section Port Configuration Section Zoning Configuration Add Members to an Alias Remove Members from an Alias Connection Security ConfigurationSection Device Security Configuration Radius Server Configuration Section Event Log ConfigurationSimple Network Management Protocol Configuration Command Reference 59183-01 a Index List of Tables Introduction Intended Audience Switch Models and ExamplesRelated Materials New in This Release Availability Technical SupportTraining Support Headquarters Contact Information Introduction Technical Support 59183-01 a This section describes the following tasks Command Line Interface Usage To log off, enter the Exit command Logging In to the Switch Entering Commands Opening and Closing an Admin SessionCommand-Line Completion Getting Help Setting Page Breaks Local directory now /itasca/conf/images bin Creating a Support File Ftp Downloading and Uploading Files Userimages password images Factory User Accounts User Account Configuration Displaying User Account Information Creating User Accounts Following example deletes the user account named user3 Modifying User Accounts and Passwords Network and Fabric Configuration Displaying Name Server Information WWN Displaying the Ethernet Network Configuration Configuring the Ethernet Port Verifying and Tracing Fibre Channel Connections Verifying a Switch in the NetworkFollowing is an example of a connection failure Port Switch configuration consists of the following tasks Displaying Switch Information Switch Operational Information PID Ppid CPU Time System Process Information Elapsed Time Between Resets Switch Configuration Parameters Configuration Information Security Configuration Parameters Zoning Configuration Parameters Heartbeat LED Activity Hardware Information Firmware Information Managing Switch Services Please Note Display a List of Switch Configurations Managing Switch ConfigurationsActivate a Switch Configuration Delete a Switch Configuration Copy a Switch ConfigurationModify a Switch Configuration Decimal value, 100-100000 msec Creating the Backup File Back Up and Restore a Switch Configuration Downloading the Configuration File Ftp ipaddress user images password images ftp bin Restoring the Configuration File Setting the Date and Time Paging a Switch Switch Configuration Setting the Date and Time List Installing Firmware Resetting a SwitchSwitch Reset Methods Nondisruptive Activation One-Step Firmware Installation Enter the password for your account name FTP only Wait for the unpack to complete Custom Firmware Installation Display Feature Licenses Managing Switch Feature Upgrades Install a Feature License Key Page This section describes the following topics Displaying Port InformationYou can display the following port information Arbff Port Configuration Parameters PL-XPL-VC-SG3-22 Port Operational Information Port Threshold Alarm Configuration Parameters Port Performance FTRJ8524P2BNL Transceiver Information Set config port Modifying Port Operating Characteristics Port Binding SANbox admin-config # set config security port Resetting a Port Configuring Port Threshold Alarms SANbox admin-config # set config threshold Online Tests for Ports Testing a Port Offline Tests for Ports Display Port Test Results Cancel a Port Test Current value Extending Port Transmission Distance SANbox # show donor Port Config Zoning Configuration Displaying Zoning Database Information Configured Zone Set Information SANbox # zoning list Active ZoneSet Information Active Zone Set Information Zone Membership Information Zone Set Membership Information Alias and Alias Membership Information Zoning Modification History E2JBOD2 Zoning Database Limits Configuring the Zoning Database SANbox # admin start SANbox admin # config edit Modifying the Zoning Database Removing Inactive Zone Sets, Zones, and Aliases Resetting the Zoning Database Managing Zone Sets consists of the following tasks Managing Zone SetsCreate a Zone Set Delete a Zone Set Remove Zones from a Zone Set Rename a Zone SetCopy a Zone Set Add Zones to a Zone Set Delete a Zone Deactivate a Zone SetManaging Zones Create a Zone Remove Members from a Zone Rename a ZoneCopy a Zone Add Members to a Zone Rename an Alias Managing AliasesCreate an Alias Delete an Alias Add Members to an Alias Copy an AliasRemove Members from an Alias Managing SSL and SSH Services Connection Security Configuration TelnetEnabled True / False SSHEnabled Creating an SSL Security Certificate Displaying SSL and SSH ServicesPage Device Security Configuration Displaying Security Database Information Configured Security Set Information MD5 Active Security Set Information Group Membership Information Security Set Membership Information Security Database Limits Security Database Modification History Set Config Security command Configuring the Security Database Before Reaching the end of the list Modifying the Security Database Resetting the Security Database Rename a Security Set Managing Security SetsCreate a Security Set Delete a Security Set Deactivate a Security Set Add Groups to a Security SetRemove Groups from a Security Set Activate a Security Set Rename a Group Managing GroupsCreate a Group Delete a Group Add Members to a Group Copy a Group Remove Members from a Group Modify a Group Member Radius Server Configuration Displaying Radius Server Information Configuring a Radius Server on the Switch Page Starting and Stopping Event Logging Event Log Configuration Displaying the Event Log Controlling Messages in the Output Stream Filtering the Event Log Display Configure the Event Log Managing the Event Log Configuration Restore the Event Log Configuration Display the Event Log ConfigurationClearing the Event Log Logging to a Remote Host Creating and Downloading a Log File Page You control the Snmp service SNMPEnabled parameters through Managing the Snmp Service 12-2 59183-01 a Displaying Snmp Information Modifying the Snmp Configuration SANbox admin # reset snmp Resetting the Snmp ConfigurationPage Access Authority Command Reference Syntax and Keywords Command Commands are listed in alphabetical order as follows Command Listing Keywords AdminAuthority Syntax Copy aliassource aliasdestination AliasSyntax alias Keywords add alias memberlist Remove alias memberlist Delete aliasList Members alias Syntax config ConfigKeywords activate configname Restore Edit confignameSave configname 59183-01 a 13-9 Keywords certificate CreateSupport 59183-01 a 13-11 SANbox admin # create support Following is an example of the Create Certificate command Syntax date DateKeywords MMDDhhmmCCYY Authority None Syntax exit ExitCloses the Telnet session Authority None FcpingKeywords address Portdestination FctraceHopcount Examples The following is an example of the Fctrace command Keywords add licensekey FeatureSyntax feature Add licensekey log Following is an example of the Feature Log command Syntax firmware install Firmware Install 59183-01 a 13-21 Syntax group Group ISL Group Member Attributes Keywords add group Port Group Member Attributes Create group type Configures security for attachments to other switchesMS Group Member Attributes Copy groupsource groupdestination Group Member Attributes Edit group member Securitysets group Members groupRemove group memberlist Rename groupold groupnew Following is an example of the Group Edit command Following is an example of the Group Members command Following is an example of the Group List command Syntax hardreset Hardreset Keyword Help command keywordCommand Help History Re-execute selected commandsFollowing is an example of the History command History Hotreset Hotreset Image Keywords cleanupSyntax image Unpack file 13-36 59183-01 a Lip portnumber Following is an example of the Lip commandLip Reinitializes the specified loop port Authority None Syntax logout Logout Syntax passwd accountname Keywords accountname Passwd Ping ipaddress PingIpaddress Authority None Syntax ps Examples The following is an example of the Ps commandDisplays current system process information Authority None Syntax quit Quit Syntax reset ResetKeywords config configname Radius ServicesFactory Port portlist Zoning SwitchWorkstation could lose communication with the switch System Values Switch Configuration Defaults Parameter 4-Gbps Port Defaults Port Configuration Defaults Port Threshold Alarm Configuration Defaults Snmp Configuration Defaults Zoning Configuration Defaults 11. Services Configuration Defaults 10. Radius Configuration Defaults 13. Security Configuration Defaults 12. System Configuration Defaults Keywords active SecurityClear Limits EditSave Following is an example of the Security History command Following is an example of the Security List command Following is an example of the Security Limits command Active SecuritysetSyntax securityset Keywords activate securityset Delete securityset Copy securitysetsource securitysetdestinationCreate securityset Deactivate Following is an example of the Securityset List command Following is an example of the Securityset Groups command Option can be one of the following Set AlarmSyntax set alarm option Keywords option Set beacon state Set BeaconState Ports portnumber Set Config Port14. Port Configuration Parameters Keywords port portnumber Send Arbff True instead of IDLEs False on the loop 14. Port Configuration Parameters 14. Port Configuration Parameters 59183-01 a 13-65 13-66 59183-01 a Syntax set config security Set Config Security15. Security Configuration Parameters 13-68 59183-01 a 16. Port Binding Configuration Parameters Set Config Security Portbinding Syntax set config switch Set Config Switch17. Switch Configuration Parameters Resource Allocation Timeout Value. The number of millisec Syntax set config threshold Set Config Threshold18. Port Alarm Threshold Parameters Following is an example of the Set Config Threshold command Error rate has fallen below the falling trigger Syntax set config zoning Set Config Zoning19. Zoning Configuration Parameters 59183-01 a 13-75 Component filterlist Set LogSet log Archive Display filter Specifies all ports Disables monitoring on all portsLevel filter Monitors none of the severity levels Stops logging of events Alarms are always logged and always displayed on the screenStart Stop Keywords state Set PagebreakSyntax pagebreak state 59183-01 a 13-81 Set port portnumber EnableSet Port Set port clear State state Speed transmissionspeed Configuration fields Set Setup RadiusConfigures Radius servers on the switch Set setup radius 20. Radius Service Settings 13-86 59183-01 a 21. Switch Services Settings Set Setup ServicesConfigures services on the switch Syntax set setup services 21. Switch Services Settings 59183-01 a 13-89 22. Snmp Configuration Settings Set Setup SnmpConfigures Snmp on the switch Syntax set setup snmp 22. Snmp Configuration Settings 13-92 59183-01 a Syntax set setup system Set Setup System23. System Configuration Settings 13-94 59183-01 a State can be one of the following Set Switch StateAdmin session Set switch state state Set timezone Set Timezone Authority None Syntax Show AboutShow about Following is an example of the Show Alarm command Show AlarmShow alarm Settings Syntax show broadcast Show Broadcast Show Chassis Displays chassis component status and temperatureShow chassis Portnumber Show Config PortDisplays configuration parameters for one or more ports Show config port portnumber 13-102 59183-01 a Displays the security database configuration parameters Show Config SecuritySyntax show config security Show config security portbinding portnumber Show Config Security Portbinding Displays the switch configuration parameters Show Config SwitchSyntax show config switch Displays alarm threshold parameters for the switch Show Config ThresholdSyntax show config threshold Displays zoning configuration parameters for the switch Show Config ZoningSyntax show config zoning Syntax show domains Show Domains Show donor Show Donor Show fabric Show Fabric Question marks ? Show FdmiShow fdmi portwwn Portwwn Following is an example of the Show Fdmi WWN command Displays the status of the active network interfaces Show InterfaceSyntax show interface Component Show LogShow log Numberofevents Options Level Port SettingsFollowing is an example of the Show Log Level command Following is an example of the Show Log Options command Displays Link State database information Show LsdbShow lsdb Portlist InstalledShow Media Show media 25. Transceiver Information 13-120 59183-01 a 59183-01 a 13-121 Show mem count Following is an example of the Show Mem commandShow Mem Displays information about memory activity Show ns option Show NSOption Following is an example of the Show NS portID command Show Pagebreak Displays the current pagebreak settingSyntax show pagebreak Byte portlist Show PerfSyntax show perf portlist Keywords portlist Inframe portlist Errors portlistOutbyte portlist Frame portlist Following is an example of the Show Perf Byte command Show port Show Port26. Show Port Parameters Lipalpdalps LIPF7F7 26. Show Port Parameters 59183-01 a 13-133 Syntax show post log Show Post Log Displays manufacturing information about the switch Show Setup MfgSyntax show setup mfg Syntax show setup radius Show Setup RadiusDisplays Radius server information Displays switch service status information Show Setup ServicesSyntax show setup services Following is an example of the Show Setup Snmp command Show Setup SnmpDisplays the current Snmp settings Syntax show setup snmp Displays the current system settings Show Setup SystemSyntax show setup system Show steering domainid Show SteeringDomainid 27. Switch Operational Parameters Show SwitchDisplays switch operational information Show switch 13-142 59183-01 a Show Timezone Displays the current time zone settingSyntax show timezone Displays all connected devices Show TopologySyntax show topology 59183-01 a 13-145 Show users Show Users Show Version Syntax shutdown Shutdown Test cancel Test CancelPort portnumber Online Test PortSyntax test port portnumber Offline loopbacktype 28. Port Test Parameters 13-152 59183-01 a Test status Test Status Uptime Examples The following is an example of the Uptime commandAuthority None Syntax uptime Add UserSyntax user Keywords accounts Following is an example of the User Edit command Following is an example of the User Add command Following is an example of the User List command Following is an example of the User Delete command Whoami Examples The following is an example of the Whoami commandAuthority None Syntax whoami Copy zonesource zonedestination ZoneSyntax zone Keywords add zone memberlist Rename zoneold zonenew Delete zoneMembers zone Remove zone memberlist Following is an example of the Zone Members command Following is an example of the Zone Zonesets command Syntax zoneset Zoneset Zones zoneset Delete zonesetRemove zoneset zonelist Rename zonesetold zonesetnew Following is an example of the Zoneset Zones command Following is an example of the Zoneset List command Syntax zoning ZoningDelete orphans 29. Zoning Database Limits Opens a Zoning Edit session 13-168 59183-01 a Following is an example of the Zoning Limits command Following is an example of the Zoning List command Index Index-2 59183-01 a FTP See File Transfer Protocol Example Index-4 59183-01 a 59183-01 a Index-5 Index-6 59183-01 a Set Config Security Port command Show Config Security Port command 59183-01 a Index-9 Index-10 59183-01 a 59183-01 a Index-11