Dell PowerConnect B-RX BigIron RX Series Configuration Guide v02.8.00 - Page 183

Configuring RADIUS security 4 BigIron RX(config)# aaa authentication enable implicit-user Syntax: [no] aaa authentication enable implicit-user Configuring RADIUS authorization The device supports RADIUS authorization for controlling access to management functions in the CLI. Two kinds of RADIUS authorization are supported: • Exec authorization determines a user's privilege level when they are authenticated • Command authorization consults a RADIUS server to get authorization for commands entered by the user Configuring Exec authorization NOTE Before you configure RADIUS exec authorization on the BigIron RX, make sure that the aaa authentication enable default radius command or the aaa authentication login privilege-mode command exist in the configuration. When RADIUS exec authorization is performed, the BigIron RX consults a RADIUS server to determine the privilege level of the authenticated user. To configure RADIUS exec authorization on the BigIron RX, enter the following command. BigIron RX(config)# aaa authentication exec default radius Syntax: aaa authentication exec default radius | none If you specify none, or omit the aaa authorization exec command from the device's configuration, no exec authorization is performed. NOTE If the aaa authorization exec default radius command exists in the configuration, following successful authentication the device assigns the user the privilege level specified by the brocade-privilege-level attribute received from the RADIUS server. If the aaa authorization exec default radius command does not exist in the configuration, then the value in the brocade-privilege-level attribute is ignored, and the user is granted Super User access. For the aaa authorization exec default radius command to work, either the aaa authentication enable default radius command, or the aaa authentication login privilege-mode command must also exist in the configuration. Configuring command authorization When RADIUS command authorization is enabled, the BigIron RX consults the list of commands supplied by the RADIUS server during authentication to determine whether a user can execute a command he or she has entered. You enable RADIUS command authorization by specifying a privilege level whose commands require authorization. For example, to configure the BigIron RX to perform authorization for the commands available at the Super User privilege level (that is; all commands on the device), enter the following command. BigIron RX(config)# aaa authorization commands 0 default radius BigIron RX Series Configuration Guide 107 53-1002253-01