Fabric OS Administrator's Guide v7.0.0 (53-1002148-02, June 2011)

Fabric OS Administrator’s Guide 103

53-1002148-02

The authentication model using RADIUS and LDAP

Fabric OS users on the RADIUS server

All existing Fabric OS mechanisms for managing local switch user accounts and passwords remain

functional when the switch is configured to use RADIUS. Changes made to the local switch

database do not propagate to the RADIUS server, nor do the changes affect any account on the

RADIUS server.

Windows 2000 IAS

To configure a Windows 2000 internet authentication service (IAS) server to use VSA to pass the

Admin role to the switch in the dial-in profile, the configuration specifies the Vendor code (1588),

Vendor-assigned attribute number (1), and attribute value (admin), as shown in Figure 15.

FIGURE 15 Windows 2000 VSA configuration

Linux FreeRadius server

For the configuration on a Linux FreeRadius server, define the values outlined in Table 17 in a

vendor dictionary file called dictionary.brocade.

TABLE 17 dictionary.brocade file entries

Include Key Value

VENDOR Brocade 1588

ATTRIBUTE Brocade-Auth-Role 1 string Brocade

Brocade-AVPairs1, 2, 3, 4 2, 3, 4, 5 string

Admin Domain or Virtual Fabric member list

Brocade-Passwd-ExpiryDate 6 string MM/DD/YYYY in UTC

Brocade-Passwd-WarnPeriod 7 integer in days