Comware

 View Only

  • 1.  IAS (RADIUS) for SSH/Telnet Authentication

    Posted Mar 02, 2007 02:22 PM
    Has anyone implemented this? I don't have a problem with the switch configuration... I am trying to figure out what needs to be setup on the RADIUS user for the switch to know who is a manager vs. operator.


  • 2.  RE: IAS (RADIUS) for SSH/Telnet Authentication

    Posted Mar 02, 2007 05:38 PM
    On the switch you need to add 'aaa authentication login privilege-mode'

    In IAS, you need to add a Service type:

    Service-Type | Value | Client Access Level
    --------------------------------------------
    Administrative | 6 | Manager
    NAS-Prompt | 7 | Operator


  • 3.  RE: IAS (RADIUS) for SSH/Telnet Authentication

    Posted Mar 05, 2007 04:23 AM
    Unfortunately this allows anyone with an RADIUS account to access both operator & priveleged mode. How do I ensure that only certain RADIUS users have access?


Related Content