Administrator Guide

Attribute Field Required Value
VSA syntax
String (3 to 247 ASCII characters)
Admin-Email
(Optional) Email address of the administrator.
VSA vendor ID
VSA number
VSA syntax
12740
2
String (3 to 247 ASCII characters)
Admin-Phone
(Optional) Phone number for the administrator.
VSA vendor ID
VSA number
VSA syntax
12740
3
String (3 to 247 ASCII characters)
Admin-Mobile
(Optional) Mobile phone number for the administrator.
VSA vendor ID
VSA number
VSA syntax
12740
4
String (3 to 247 ASCII characters)
Admin-Poll-Interval
Frequency, in seconds, the GUI polls the group conguration
data. The default is 30 (seconds).
VSA vendor ID
VSA number
VSA syntax
12740
5
Integer (up to 6 numerals)
Prerequisites for Conguring RADIUS Servers
Before you use a RADIUS server to authenticate administration accounts (or CHAP accounts for iSCSI access), you must install the
server and set up the accounts:
1. Install and congure the RADIUS authentication server.
For example, to add the group as a RADIUS client on a Microsoft Windows server, you must specify the following items:
• Name (also called Friendly Name) for the client. Dell recommends using the group name.
• Group IP address (also called Client address) or dedicated management network IP address.
• Vendor Name attribute. Select RADIUS Standard.
• Password (also called Shared Secret) of up to 63 ASCII characters. This password should also be entered in Group Manager
when you congure the group to use the RADIUS authentication server.
NOTE: Though using a password is not required, Dell recommends that you use one for increased security.
2. For iSCSI CHAP (Challenge Handshake Authentication Protocol) accounts, add each congured network interface on all the
group members as a RADIUS client. Specify the network interface IP address and, optionally, a password (or secret), up to 63
ASCII characters. If you specify a password, enter this password when you congure the group to use the RADIUS
authentication server. Dell recommends that you use a password for increased security.
3. For administration accounts, set up the attributes that allow the server to authorize accounts as group administrator, pool
administrator, or read-only accounts.
4. Set up the accounts. You can set up accounts on the RADIUS server or a dierent resource, such as Active Directory. The
RADIUS server veries login credentials (account name and password) that the user supplies against these accounts.
The RADIUS server must be accessible to all the group members.
Congure a RADIUS Server
When conguring a RADIUS server in a pure IPv6 environment, you must:
• Specify, on the RADIUS server, a RADIUS client for every IPv6 IP as an entry for the Microsoft Windows server.
• Enable access for the RADIUS user.
To congure the RADIUS server:
About Group-Level Security
71