User Guide

236 Chapter 6 Configuring authentication
320818-A
— Vendor-Type
b LDAP servers:
— server IP address
— port number used for the service
— configured accounts and users so that you can specify appropriate
search entries and group and user attributes
Configuring authentication using the CLI
The basic steps for configuring and managing client authentication are:
1 Create the authentication methods.
2 Configure specific settings for the methods.
Note: You can assign vendor-specific codes to the Vendor-Id and
Vendor-Type attributes. The RADIUS server uses Vendor-Id and
Vendor-Type attributes in combination to identify what values it will
assign and send for attributes such as group name and session timeout.
Each vendor has a specific dictionary. The Vendor-Id specified for an
attribute identifies the dictionary the RADIUS server will use to retrieve
the attribute value. The Vendor-Type indicates the index number of the
required entry in the dictionary file.
The Internet Assigned Numbers Authority (IANA) has designated SMI
Network Management Private Enterprise Codes that can be assigned to
the Vendor-Id attribute (see
http://www.iana.org/assignments/enterprise-numbers).
RFC 2865 describes usage of the Vendor-Type attribute.
If you specify Vendor-Id and Vendor-Type on the RADIUS server and on
the Nortel SNAS 4050, the Nortel SNAS 4050 will retrieve
vendor-specific values for the associated attribute. If you set the
Vendor-Id and Vendor-Type attributes to 0, the RADIUS server sends
standard attribute values.