Dell PowerConnect Brocade 300 Fabric OS Administrator's Guide v7.1.0 - Page 154

5 Remote authentication Fabric OS users on the RADIUS server All existing Fabric OS mechanisms for managing local-switch user accounts and passwords remain functional when the switch is configured to use RADIUS. Changes made to the local switch database do not propagate to the RADIUS server, nor do the changes affect any account on the RADIUS server. Windows 2000 IAS To configure a Windows 2000 internet authentication service (IAS) server to use VSA to pass the admin role to the switch in the dial-in profile, the configuration specifies the Vendor code (1588), Vendor-assigned attribute number (1), and attribute value (admin), as shown in Figure 10. FIGURE 10 Windows 2000 VSA configuration Linux FreeRADIUS server For the configuration on a Linux FreeRADIUS server, define the values outlined in Table 19 in a vendor dictionary file called dictionary.brocade. TABLE 19 Entries in dictionary.brocade file Include Key Value VENDOR ATTRIBUTE Brocade Brocade-Auth-Role Brocade-AVPairs1, 2, 3, 4 Brocade-Passwd-ExpiryDate Brocade-Passwd-WarnPeriod 1588 1 string Brocade 2, 3, 4, 5 string Admin Domain or Virtual Fabric member list 6 string MM/DD/YYYY in UTC 7 integer in days After you have completed the dictionary file, define the permissions for the user in a configuration file. For example, to grant the user jsmith admin permissions, you would add the following statement to the configuration file: swladmin Auth-Type := Local, User-Password == "myPassword" Brocade-Auth-Role = "admin", Brocade-AVPairs1 = "HomeLF=70", 154 Fabric OS Administrator's Guide 53-1002745-02