Administrator Guide

Security Commands 941
User Guidelines
on-for-login—This parameter globally configures the switch to send the
RADIUS Service-Type attribute in the Access-Request message sent to all
RADIUS authentication servers. The switch sends the Service-Type value
Administrative (6) for administrators attempting to access the switch console
and sends Service-Type value Login (1) for users attempting to access the
network.
mandatory—This parameter enables processing and validation of the Service-
Type parameter received from the RADIUS server in Access-Accept messages.
Dell EMC Networking N-Series switches accept the Login-User (1) or
Administrative-User (6) values in the Access-Accept message returned from
the RADIUS server. Access-Accept messages without one of those values are
treated as if an Access-Reject message has been received.
Command History
Introduced in version 6.3.0.1 firmware. Updated in 6.3.0.5 firmware.
Example
This command configures the switch to send the Service-Type attribute in the
Access-Request message sent to the RADIUS server.
console#conf
console(config)#radius server attribute 6 on-for-login-auth
radius server attribute 8
Use the radius server attribute 8 command to enable the switch to send the
RADIUS Framed-IP-Address attribute in authentication messages sent to the
authentication server.
Syntax
radius server attribute 8 include-in-access-req
no radius server attribute 8 include-in-access-req
Default Configuration
By default, the switch does not send the Framed-IP-Address attribute to the
authentication server.