Administrator Guide

RADIUS Server
Parameter
Action/Description Comments
NAS IP
9. Specify the NAS IP address to send in RADIUS
packets.
l To set the global NAS IP address, enter the
following command:
ip radius nas-ip <ip_addr>
You can configure a global NAS IP
address that the mobility controller
uses for communications with all
RADIUS servers. If you do not
configure a server-specific NAS IP
address, the global NAS IP address
is used.
Enable IPv6
To enable the operation of the RADIUS server
over IPv6, check the Enable IPv6 check box.
Enabling IPv6 also enables the
RADIUS attributes used to support
IPv6 network access.
Source Interface
10. Enter a VLAN number ID.
This allows you to use source IP addresses to
differentiate RADIUS requests.
l VLAN ID: Specify vlanid for the source
interface when the RADIUS packets are sent
to the RADIUS server via IPv4.
l IPv6 address: Specify ivpv6addr for the
source interface when the RADIUS packets
are sent to the RADIUS/W-ClearPass Policy
Manager server via IPv6.
NOTE: A VLAN interface can have multiple IPv6
addresses, which is why it isn't sufficient to
specify the VLAN ID for RADIUS over IPv6.
This option associates a VLAN
interface with the RADIUS server to
allow the server-specific source
interface to override the global
configuration. This option defines
the source IP address in the RADIUS
requests.
l If you associate a Source
Interface (by entering a VLAN
number) with a configured
server, then the source IP
address of the packet is that
interface’s IP address.
l If you do not associate the
Source Interface with a
configured server (by leaving the
field blank), the IP address of the
global Source Interface is used.
Use MD5
11. Enable this option to use an MD5 hash
instead of a clear text password.
This option is disabled by default.
Use IP address for
calling station ID
12. Enable this option if you choose to use an IP
address instead of a MAC address for calling
station IDs.
This option is disabled by default.
Mode
13. Enable this option if you want to enable the
RADIUS server.
The Mode parameter defines
whether the controller should or
should not send RADIUS requests to
the RADIUS/W-ClearPass server.
This option is enabled by default.
Lowercase MAC
address
Sends the MAC address in lowercase in the
authentication and accounting requests to this
server.
Default: Disabled
Dell Networking W-ClearPass Deployment Guide
Preparing the Mobility Controller for W-ClearPass PolicyManager Integration
| 71