Configuring Role and AOR Attributes on the RADIUS Server
If you specify that authorization is to be performed on the RADIUS server, you must create a SANnav dictionary file on the RADIUS server, and modify the RADIUS server dictionary file to reference the SANnav dictionary.
The dictionary file defines the symbolic names for RADIUS attributes and values. This file contains the attribute definition for roles and areas of responsibility (AORs), which are used for authorization.
Perform the following steps on the RADIUS server.
1. Create a dictionary file and name it dictionary.NM_AAA_dictionary.
2. Open the dictionary file and add the following:
# -*- text -*-
#
# dictionary.brocade
#
VENDOR Brocade 1588
BEGIN-VENDOR Brocade
ATTRIBUTE NM-Roles-AORs-List 1 string
END-VENDOR Brocade
3. Save and copy this SANnav dictionary file to the RADIUS server dictionary directory.
4. Open the RADIUS server dictionary file in a text editor (such as Notepad).
5. Add the following line to reference the SANnav dictionary file in the RADIUS server dictionary file:
$INCLUDE dictionary.NM_AAA_dictionary
6. Save and close the RADIUS server dictionary file.
Parent topic