Dell Force10 E600i FTOS Version 8.4.1.5 Configuration Guide for ExaScale - Page 869

Auto-command You can configure the system through the RADIUS server to automatically execute a command when you connect to a specific line. To do this, use the command auto-command. The auto-command is executed when the user is authenticated and before the prompt appears to the user. Set access to privilege levels through RADIUS Through the RADIUS server, you can use the command privilege level to configure a privilege level for the user to enter into when they connect to a session.This value is configured on the client system. Configuration Task List for RADIUS To authenticate users using RADIUS, at least one RADIUS server must be specified so that the system can communicate with and configure RADIUS as one of your authentication methods. The following list includes the configuration tasks for RADIUS. • Define a aaa method list to be used for RADIUS (mandatory) • Apply the method list to terminal lines (mandatory except when using default lists) • Specify a RADIUS server host (mandatory) • Set global communication parameters for all RADIUS server hosts (optional) • Monitor RADIUS (optional) For a complete listing of all FTOS commands related to RADIUS, refer to the Security chapter in the FTOS Command Reference. Note: RADIUS authentication and authorization are done in a single step. Hence, authorization cannot be used independent of authentication. However, if RADIUS authorization is configured and authentication is not, then a message is logged stating this. During authorization, the next method in the list (if present) is used, or if another method is not present, an error is reported. To view the configuration, use the show config in the LINE mode or the show running-config command in the EXEC Privilege mode. Define a AAA method list to be used for RADIUS To configure RADIUS to authenticate or authorize users on the system, you must create a AAA method list. Default method lists do not need to be explicitly applied to the line, so they are not mandatory. To create a method list, enter one of the following commands in CONFIGURATION mode: Command Syntax Command Mode aaa authentication login CONFIGURATION method-list-name radius Purpose Enter a text string (up to 16 characters long) as the name of the method list you wish to use with the RADIUS authentication method. Security | 869