Users Guide

Security Commands 1005
Default Configuration
By default, the Service-Type is not included in the Access-Request message
sent to the authentication server.
Command Mode
RADIUS Server Configuration
User Guidelines
on-for-login —If the on-for-login parameter is enabled, the Service-Type TLV is
send in the Access-Request message.
mandatory—If the mandatory parameter is enabled, the Service-Type
attribute is required and validated in the Access-Accept packet received from
the RADIUS server. Dell EMC Networking N-Series switches accept the
Login-User (1) and Administrative-User (6) values in the Access-Accept
message returned from the RADIUS server. If the mandatory parameter is not
configured, the Service-Type TLV received in an Access-Accept packet is
ignored.
Command History
Introduced in version 6.3.0.1 firmware. Updated in 6.3.5.0 firmware.
Example
This example configures the switch to send the Service-Type attribute to the
RADIUS server in the Access-Request message.
console#conf
console(config)#radius server auth 4.3.2.1
console(config-auth-radius)#attribute 6 on-for-login-auth
This example configures the switch to process and validate the Service-Type
received in the Access-Accept message from the RADIUS server.
console#conf
console(config)#radius server auth 4.3.2.1
console(config-auth-radius)#attribute 6 mandatory