Appendix E Using Radius Authentication; Using Radius Authentication To Access The Eternus Dx Disk Storage System - Fujitsu Eternus web GUI User Manual

Appendix E Using RADIUS Authentication

This chapter describes supplementary notes when using RADIUS Authentication.
E.1 Using RADIUS Authentication to Access the
ETERNUS DX Disk Storage System
• RADIUS Authentication is used to authenticate logging in to the ETERNUS DX Disk storage
system with GUI or CLI.
• Up to two RADIUS servers can be connected to an ETERNUS DX Disk storage system.
• To use RADIUS Authentication, the user account information (user name, password, and role
name) that is allowed to access ETERNUS DX Disk storage system in the RADIUS server
must be pre-registered.
• There are two types of authentication methods: CHAP and PAP.
• User roles are specified in the Vendor Specific Attribute (VSA) of the Access-Accept response
from the server. The following table shows the syntax of the VSA based account role on the
RADIUS server.
Syntax of the Vendor Specific Attribute (VSA) based account role
Type
Length
Vendor-Id
Vendor type
Vendor length
Attribute-Specific
*1:
Item Size
(octets)
1
1
4
1
1
1 or more
The server-side role names are case sensitive and must be set correctly.
[Example] RoleName0
ETERNUS Web GUI User's Guide
Copyright 2011 FUJITSU LIMITED
Value
26 Attribute number for the Vendor Specific
Attribute
7 or more Attribute size (calculated by server)
211 Fujitsu Limited (SMI Private Enterprise
Code)
1 Eternus-Auth-Role
2 or more Attribute size described after the
Vendor type (calculated by server)
ASCII characters List of one or more role names
assignable to successfully
authenticated users (*1)
630
Description
P2X0-1090-02ENZ0