Enterasys csx5500 用户指南
USER’S GUIDE
216 CyberSWITCH
U
SING
M
ANAGE
M
ODE
offnode
Allows you to change current settings for off-node server options. You may use this command
to enable the RFC2138 compliance feature.
to enable the RFC2138 compliance feature.
RADIUS T
YPE
C
ONFIGURATION
E
LEMENTS
RADIUS T
YPE
Specify the type of RADIUS implementation: Cabletron implementation or RFC2138
implementation. For preexisting systems upgraded to UAA 7.3 software, the default is Cabletron
implementation. For new systems shipped with 7.3 software, the default is RFC2138.
implementation. For preexisting systems upgraded to UAA 7.3 software, the default is Cabletron
implementation. For new systems shipped with 7.3 software, the default is RFC2138.
B
ACKGROUND
I
NFORMATION
The Cabletron RADIUS implementation allows the CyberSWITCH to perform device lookups in
RADIUS using MAC addresses, IP addresses, and other additional methods so that it can make
outbound calls using RADIUS. However, this implementation does not conform to RFC2138, in
which these “special” lookups are not permitted. The CyberSWITCH now provides an alternative
implementation to conform to the RFC2138 standard. This RFC2138 option disables RADIUS
lookups for outbound calls.
RADIUS using MAC addresses, IP addresses, and other additional methods so that it can make
outbound calls using RADIUS. However, this implementation does not conform to RFC2138, in
which these “special” lookups are not permitted. The CyberSWITCH now provides an alternative
implementation to conform to the RFC2138 standard. This RFC2138 option disables RADIUS
lookups for outbound calls.
D
YNAMIC
D
EVICE
O
PTION
This feature is specific to
configurations. Terminal Mode connections require both
device-level + user-level security configurations. With the Dynamic Device Option, you no longer
need to configure separate devices for each individual user. You may configure a single default
device which will apply to every user dialing in and authenticating with RADIUS, ACE, or
TACACS user-level security.
need to configure separate devices for each individual user. You may configure a single default
device which will apply to every user dialing in and authenticating with RADIUS, ACE, or
TACACS user-level security.
C
ONFIGURING
THE
D
YNAMIC
D
EVICE
O
PTION
U
SING
CFGEDIT
1.
From CFGEDIT Main Menu, select (3) Security.
2.
Select (5) Off-node Server Information.
3.
Select Misc Off-node Server Options.
4.
Check the current setting for Dynamic Device Option.
Note: If enabled, press <RET> to exit the menu. If disabled, select the Dynamic Device
Note: If enabled, press <RET> to exit the menu. If disabled, select the Dynamic Device
Option function to enable the feature. (This selection is a simple toggle switch).
5.
Return to the Misc Off-node Server Options Menu.
6.
Select Dynamic Device Default Settings.
7.
Provide a default device name.
8.
Continue with the default device configuration just as you would for an on-node device entry.
(For more information on device entries, refer to the
(For more information on device entries, refer to the
.)