Users Guide

Security Commands 1023
Command Mode
Global Configuration
User Guidelines
on-for-login—This parameter globally configures the switch to send the
RADIUS Service-Type attribute in the Access-Request message sent to all
RADIUS authentication servers. The switch sends the Service-Type value
Administrative (6) for administrators attempting to access the switch console
and sends Service-Type value Login (1) for users attempting to access the
network.
mandatory—This parameter enables processing and validation of the Service-
Type parameter received from the RADIUS server in Access-Accept messages.
Dell EMC Networking N-Series switches accept the Login-User (1) or
Administrative-User (6) values in the Access-Accept message returned from
the RADIUS server. Access-Accept messages without one of those values are
treated as if an Access-Reject message has been received.
Command History
Introduced in version 6.3.0.1 firmware. Updated in 6.3.0.5 firmware.
Example
This command configures the switch to send the Service-Type attribute in the
Access-Request message sent to the RADIUS server.
console#conf
console(config)#radius server attribute 6 on-for-login-auth
radius server attribute 8
Use the radius server attribute 8 include-in-access-req command to enable
the switch to send the RADIUS Framed-IP-Address attribute in Access-
Request messages sent to the authentication server.
Syntax
radius server attribute 8 include-in-access-req
no radius server attribute 8 include-in-access-req