7.6.1.0 - Force10 Networks

Privilege Level
Through the RADIUS server, you can use the command privilege level to configure a privilege level for
the user to enter into when they connect to a session.This value is configured on the client system.
Configuration Task List for RADIUS
To authenticate users using RADIUS, at least one RADIUS server must be specified so that the E-Series
cab communicate with and configure RADIUS as one of your authentication methods.
The following list includes the configuration tasks for RADIUS.
• define an aaa method list to be used for RADIUS on page 117 (mandatory)
• apply the method list to terminal lines on page 118 (mandatory except when using default lists)
• specify a RADIUS server host on page 118 (mandatory)
• set global communication parameters for all RADIUS server hosts on page 119 (optional)
• monitor RADIUS on page 120 (optional)
For a complete listing of all commands related to RADIUS, refer to .
Note: RADIUS authentication and authorization are done in a single step. Hence, authorization cannot
be used independent of authentication. However, if RADIUS authorization is configured and
authentication is not, then a message is logged stating this. During authorization, the next method in
the list (if present) is used, or if another method is not present, an error is reported.
To view the configuration, use the show config in the LINE mode or the show running-config command
in the EXEC privilege mode.
define an aaa method list to be used for RADIUS
To configure RADIUS to authenticate or authorize users on the E-Series, you must create an AAA method
list. Default-method-lists do not need to be explicitly applied to the line, hence, they are not-mandatory. To
create a method list, enter either one of the following commands in CONFIGURATION mode:
Command Syntax Command Mode Purpose
aaa authentication login
method-list-name radius
aaa authorization exec
{method-list-name | default} radius
tacacs+
CONFIGURATION Enter a text string (up to 16 characters long) as the
name of the method list you wish to use with the
RADIUS authentication method.
CONFIGURATION Create methodlist with RADIUS and TACACS+ as
authorization methods. Typical order of methods:
RADIUS, TACACS+, Local, None. If authorization
is denied by RADIUS, the session ends (radius
should not be the last method specified).
FTOS Configuration Guide, version 7.6.1.0 117