Dell Brocade 300 Podręcznik Użytkownika Pobierz pdf (Strona 156)

100

101

156 Fabric OS Administrator’s Guide

53-1002745-02

Remote authentication

For example, on a Linux FreeRADIUS Server, the user (user-za) with the following settings takes the

“zoneAdmin” permissions, with AD member list: 1, 2, 4, 5, 6, 7, 8, 9, 12; the Home Admin Domain

will be 1.

user-za Auth-Type := Local, User-Password == "password"

Brocade-Auth-Role = "ZoneAdmin",

Brocade-AVPairs1 = "ADList=1,2,6,"

Brocade-AVPairs2 = "ADList=4-8;ADList=7,9,12"

In the next example, on a Linux FreeRADIUS Server, the user has the “operator” permissions, with

ADList 1, 2, 4, 5, 6, 7, 8, 9, 12, 20 and HomeAD 2.

user-opr Auth-Type := Local, User-Password == "password"

Brocade-Auth-Role = "operator",

Brocade-AVPairs1 = "ADList=1,2;HomeAD=2",

Brocade-AVPairs2 = "ADList=-4-8,20;ADList=7,9,12"

In the next example, on a Linux FreeRADIUS Server, the user has the “zoneAdmin” permissions,

with VFlist 2, 4, 5, 6, 7, 8, 10, 11, 12, 13, 15 17, 19, 22, 23, 24, 25, 29, 31 and HomeLF 1.

user300 Auth-Type := Local, User-Password == "password"

Brocade-Auth-Role = "zoneadmin",

Brocade-AVPairs1 = "HomeLF=1;LFRoleList=securityadmin:2,4-8,10”

Brocade-AVPairs2 = "LFRoleList=admin:11-13, 15, 17, 19;user:22-25,29,31"

Brocade-AVPairs3 = "ChassisRole=switchadmin"

Setting up a RADIUS server

NOTE

To set up the RADIUS server, you must know the switch IP address, in either IPv4 or IPv6 notation,

or the name to connect to switches. Use the ipAddrShow command to display a switch IP address.

For Brocade Backbones, the switch IP addresses are aliases of the physical Ethernet interfaces on

the CP blades. When specifying client IP addresses for the logical switches in these systems, make

sure the CP blade IP addresses are used. For accessing both the active and standby CP blade, and

for the purpose of HA failover, both of the CP blade IP addresses must be included in the RADIUS

server configuration.

User accounts should be set up by their true network-wide identity rather than by the account

names created on a Fabric OS switch. Along with each account name, the administrator must

assign appropriate switch access permissions. To manage a fabric, one can set these permissions

to user, admin, and securityAdmin.

Configuring RADIUS server support with Linux

The following procedures work for FreeRADIUS on Solaris and Red Hat Linux. FreeRADIUS is a

freeware RADIUS server that you can find at the following website:

http://www.freeradius.org

Follow the installation instructions at the website. FreeRADIUS runs on Linux (all versions),

FreeBSD, NetBSD, and Solaris. If you make a change to any of the files used in this configuration,

you must stop the server and restart it for the changes to take effect.

FreeRADIUS installation places the configuration files in $PREFIX/etc/raddb. By default, the

PREFIX is /usr/local.

1 2 ... 151 152 153 154 155 156 157 158 159 160 161 ... 665 666

Komentarze do niniejszej Instrukcji

Brak uwag

Dell Brocade 300 Podręcznik Użytkownika Strona 156

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Oprogramowanie Dell Brocade 300