Dell Force10 S55T S55 Configuration Guide FTOS 8.3.5.3 - Page 631

• Monitor RADIUS on page 633 (optional) For a complete listing of all FTOS commands related to RADIUS, refer to the Security chapter in the FTOS Command Reference. Note: RADIUS authentication and authorization are done in a single step. Hence, authorization cannot be used independent of authentication. However, if RADIUS authorization is configured and authentication is not, then a message is logged stating this. During authorization, the next method in the list (if present) is used, or if another method is not present, an error is reported. To view the configuration, use the show config in the LINE mode or the show running-config command in the EXEC Privilege mode. Define a AAA method list to be used for RADIUS To configure RADIUS to authenticate or authorize users on the system, you must create a AAA method list. Default method lists do not need to be explicitly applied to the line, so they are not mandatory. To create a method list, enter one of the following commands in CONFIGURATION mode: Command Syntax aaa authentication login method-list-name radius aaa authorization exec {method-list-name | default} radius tacacs+ Command Mode Purpose CONFIGURATION Enter a text string (up to 16 characters long) as the name of the method list you wish to use with the RADIUS authentication method. CONFIGURATION Create methodlist with RADIUS and TACACS+ as authorization methods. Typical order of methods: RADIUS, TACACS+, Local, None. If authorization is denied by RADIUS, the session ends (radius should not be the last method specified). Apply the method list to terminal lines To enable RADIUS AAA login authentication for a method list, you must apply it to a terminal line. To configure a terminal line for RADIUS authentication and authorization, enter the following commands: Command Syntax Command Mode Purpose line {aux 0 | console 0 | vty number [end-number]} login authentication {method-list-name | default} authorization exec methodlist CONFIGURATION LINE CONFIGURATION Enter the LINE mode. Enable AAA login authentication for the specified RADIUS method list. This procedure is mandatory if you are not using default lists. To use the methodlist. Security | 631