Dell Brocade G620 Brocade 8.0.1 Fabric OS Administratiors Guide - Page 170

Managing User Accounts a) In the Internet Authentication Service window, right-click the Remote Access Policies folder, and then select New Remote Access Policy from the pop-up window. A remote access policy must be created for each group of Brocade login permissions (root, admin, switchAdmin, and user) for which you want to use RADIUS. Apply this policy to the user groups that you already created. b) In the Vendor-Specific Attribute Information window, enter the vendor code value 1588 . Click the Yes. It conforms option, and then click Configure Attribute . c) In the Configure VSA (RFC compliant) window, enter the following values, and then click OK . Vendor-assigned attribute number -- Enter the value 1 . Attribute format -- Enter String . Attribute value -- Enter the login role (root, admin, switchAdmin, user, and so on) that the user group must use to log in to the switch. d) After returning to the Internet Authentication Service window, add additional policies for all Brocade login types for which you want to use the RADIUS server. After this is done, you can configure the switch. 7. Add Admin group and CHAP/PAP/PEAP group before adding the user. To add Admin group in Active Directory User and Computers, follow these steps: a) In Server Manager, open AD DS tab and then open Active Directory User and Computers. b) Right-click on the left panel tab and select New > Group from the menu. The New Object - Group dialog box is displayed. c) Enter the Group name as "admin". Select the Group scope as Global and Group type as Security and then click OK. The admin Properties window displayed. d) Enter the Description as "FOS admin role" and click Apply. i 8. Add CHAP group in Active Directory Users and Computers. To add CHAP group, follow these steps: a) In Server Manager, open AD DS tab and then open Active Directory User and Computers. b) Right-click on the left panel tab and select New > Group from the menu. The New Object - Group dialog box is displayed. c) Enter the Group name as "chap". Select the Group scope as Global and Group type as Security and then click OK. The chap Properties window displayed. d) Enter the Description as "FOS chap group" and click Apply. 9. Define a CHAP policy for CHAP group users. To define the CHAP policy, follow these steps: a) Open the Administrative tools > Network policy server > Policies > Network Policies from the menu bar. b) Right-click and select New. The New Network Policy dialog box is displayed. c) Enter the policy name as "swchap". Select the Type of network access server as Unspecified and click Next. d) Click Add and then select the Windows Groups from the list. The Select Group dialog box is displayed. e) Enter the object name to select as "chap" and then click OK. Click Next. The Specify Access Permission window is displayed. f) Select the Access granted option and click Next. The Configure Authentication Methods window is displayed. g) Select the Encrypted authentication (CHAP) check box and click Next. Brocade Fabric OS Administration Guide, 8.0.1 170 53-1004111-02