Dell PowerEdge M420 Configuration Manual page 177

Figure 9-2. RADIUS Topology
Backup RADIUS Server
Primary RADIUS Server
The server can authenticate the user itself or make use of a back-end device to
ascertain authenticity. In either case a response may or may not be
forthcoming to the client. If the server accepts the user, it returns a positive
result with attributes containing configuration information. If the server
rejects the user, it returns a negative result. If the server rejects the client or
secrets
the shared
additional verification from the user, it returns a challenge, and the request
process begins again.
If you use a RADIUS server to authenticate users, you must configure user
attributes in the user database on the RADIUS server. The user attributes
include the user name, password, and privilege level.
NOTE:
To set the privilege level, use the
use any vendor-specific attribute value pairs.
The following example shows an entry in the FreeRADIUS
/etc/raddb/users file that allows a user (name: admin) to log onto the
switch with read/write privileges, which is equivalent to privilege level 15.
admin Auth-Type := Local,
User-Password == "pass1234"
Service-Type = NAS-Prompt-User
PowerConnect Switch
Management
differ, the server returns no result. If the server requires
Network
Management Host
Service-Type
Controlling Management Access
`
attribute. Do not
177