Enterasys 5g102-06-g Betriebsanweisung
Configuring the Radius Client
11-14
Configuring and Monitoring the Switch
5. For each Trunk ID, select ENABLE to enable the trunk.
When using port trunks, remember that:
•
Before removing a port trunk via the configuration menu, you must disable all the ports in the
trunk or remove all the network cables. Otherwise, a loop may be created.
trunk or remove all the network cables. Otherwise, a loop may be created.
•
To disable a single link within a port trunk, you should first remove the network cable, and then
disable both ends of the link via the configuration menu. This allows the traffic passing across
that link to be automatically distributed to the other links in the trunk, without losing any
significant amount of traffic.
disable both ends of the link via the configuration menu. This allows the traffic passing across
that link to be automatically distributed to the other links in the trunk, without losing any
significant amount of traffic.
11.18 CONFIGURING THE RADIUS CLIENT
Radius client enables you to configure the switch to restrict access to the management functions of
the Local Management screens, by way of the COM port or network TELNET connection.
the Local Management screens, by way of the COM port or network TELNET connection.
11.18.1 Setting the Last Resort Action
The Last Resort Action can be set on the primary and secondary servers. If the primary server does
not respond within the specified number of retries during a specified time-out period, the client
will attempt to authenticate using the secondary server. If the secondary server also does not
respond, then the client returns a time-out condition.
not respond within the specified number of retries during a specified time-out period, the client
will attempt to authenticate using the secondary server. If the secondary server also does not
respond, then the client returns a time-out condition.
The rules governing the operation of the Radius clients are as follows:
1. If the primary server does not respond within the specified number of retries during the specified
time-out period, the client will then attempt to authenticate using the secondary server. If the
secondary server also does not respond, then the client returns a time-out condition, regardless
of the Last Resort Action (LRA) setting.
secondary server also does not respond, then the client returns a time-out condition, regardless
of the Last Resort Action (LRA) setting.
NOTE: It is advisable to enable the trunk prior to connecting any cable between the
switches to avoid creating a loop.
switches to avoid creating a loop.
NOTE: Prior to setting security policy, all VLANs must be pre-configured.
The configuration and Enable State of the Radius client will be stored in NVRAM and
loaded on power-up. If the client is properly configured and enabled, the platform will
create the Radius client and enable it at boot time, superseding legacy authentication.
Otherwise, the legacy authentication becomes operational.
loaded on power-up. If the client is properly configured and enabled, the platform will
create the Radius client and enable it at boot time, superseding legacy authentication.
Otherwise, the legacy authentication becomes operational.