Page 2 - Copyright © 2009 Nortel Networks. All Rights Reserved.
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 3 - Abstract
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 4 - TABLE OF CONTENTS; RADIUS
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 5 - Conventions; Tip – Highlights a configuration or technical tip.; Bold; text indicates emphasis.
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 6 - Overview: RADIUS User Authentication; RADIUS Support on Nortel Switches; Access Level
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 8 - ERS8600 Switch Configuration Example; User name with read-write access: 8600rw
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 2. ERS8600 Switch Configuration Example For this configuration example, we will enable RADIUS user authentication on ERS8600-1 using the out-of-band management port. We will configure the Identity Engines RADIUS server ...
Page 9 - Enable RADIUS
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 10 - Verify RADIUS Global Settings; Option; true
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 19 - Add Users; For this configuration example, we will add the following users.; User Name
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 2.1.3.2 Add Users For this configuration example, we will add the following users. User Name Access Level 8600ro Read-Only-Access 8600rw Read-Write-Access 8600rwa Read-Write-All-Access IDE Step 1 – Start by going to Sit...
Page 23 - Add an Access Policy
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 2.1.3.3 Add an Access Policy IDE Step 1 – Go to Site Configuration -> Access Policies -> RADIUS. Right-click RADIUS and select New Access Policy. Enter a policy name (i.e. ERS8600-Access as used in this example) a...
Page 26 - IDE Step 4 – Go to the Identity Routing tab and click on Edit
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 IDE Step 4 – Go to the Identity Routing tab and click on Edit ___________________________________________________________________________________________________________________________ Nortel Confidential Information C...
Page 28 - IDE Step 6 – Go to the Authorization Policy tab and click on Edit
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 IDE Step 6 – Go to the Authorization Policy tab and click on Edit ___________________________________________________________________________________________________________________________ Nortel Confidential Informati...
Page 30 - IDE Step 8 – Click on New to add a new constraint
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 IDE Step 8 – Click on New to add a new constraint ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2...
Page 34 - IDE Step 12 – Click on New to add a new constraint
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 IDE Step 12 – Click on New to add a new constraint ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © ...
Page 38 - IDE Step 16 – Click on New to add a new constraint
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 IDE Step 16 – Click on New to add a new constraint ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © ...
Page 42 - Add the Nortel ERS8600-1 switch as an RADIUS Authenticator
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 2.1.3.4 Add the Nortel ERS8600-1 switch as an RADIUS Authenticator For Ignition Server to process the Nortel switch RADIUS requests, each switch must be added as an Authenticator. IDE Step 1 – Go to Site Configuration -...
Page 45 - Verify User Authentication
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 2.1.4 Verification 2.1.4.1 Verify User Authentication You can test user authentication for the ERS8600 users configured on IDE by entering the user name and password. Step 1 – Via Ignition Dashboard, select the IP addre...
Page 46 - Via Dashboard, verify the following information:; Results If; Verify user authentication from ERS switch
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 Via Dashboard, verify the following information: Option Verify Results If successful, Authentication successful should be displayed 2.1.4.2 Verify user authentication from ERS switch You can view the authentication deta...
Page 48 - Authenticated
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 49 - Part 2: ERS8600 Configuration with Specific; Enable the user access profile parameter on the ERS8600.
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 50 - Configure Outbound attributes to deny ERS8600 CLI commands
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 2.2.2 IDE Setup 2.2.2.1 Configure Outbound attributes to deny ERS8600 CLI commands Using the same base configuration from the previous step, we will simple add the CLI commands we wish to deny to the read-write user. In...
Page 58 - Modify the Authorization Policy for the ERS8600 read-write user
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 2.2.2.2 Modify the Authorization Policy for the ERS8600 read-write user IDE Step 1 – Click on the policy created from the previous example, i.e. ERS8600-Access, click on the Authorization Policy tab, select the read-wri...
Page 61 - ERS8600-1 – Verify operation by typing in some commands
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 62 - ERS5600 Switch Configuration Example; User name with read-write access: 5600rw
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 3. ERS5600 Switch Configuration Example For this configuration example, we will enable RADIUS user authentication on ERS500-1 using the switch management port. We will configure the Identity Engines RADIUS server with t...
Page 63 - ERS5698-1 Step 1 – Optional, enabling password fallback
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 64 - Administrative
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 3.2 IDE Setup 3.2.1 Configure an Outbound Attribute on Ignition Server for Service-Type The following chart displays the outbound attribute values required by the ERS5600, ERS5500, ERS4500, or ERS2500 for each access le...
Page 70 - For this configuration example, we will add the following users
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 3.2.2 Add Users For this configuration example, we will add the following users User Name Access Level 5600ro Read-Only-Access 5600rwa Read-Write-All-Access IDE Step 1 – Start by going to Site Configuration -> Direct...
Page 84 - IDE Step 11 – Click on New to add a new constraint
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 IDE Step 11 – Click on New to add a new constraint ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © ...
Page 88 - Add the Nortel ERS5600-1 switch as an RADIUS Authenticator
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 3.2.4 Add the Nortel ERS5600-1 switch as an RADIUS Authenticator For Ignition Server to process the Nortel switch RADIUS requests, each switch must be added as an Authenticator. IDE Step 1 – Go to Site Configuration -&g...
Page 91 - Results
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 3.3 Verification 3.3.1 Verify User Authentication You can test user authentication for the ERS5600 users configured on IDE by entering the user name and password. Step 1 – Via Ignition Dashboard, select the IP address o...
Page 92 - Verify user authentication from ERS switch
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 3.3.2 Verify user authentication from ERS switch You can view the authentication details via Ignition Dashboard which provides extensive details about the device or user. Step 1 – In Dashboard, select the IP address of ...
Page 95 - Software Baseline; Product; Identity Engines; Reference Documentation; Document Title
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...
Page 96 - Contact us
Nortel Switch User Authentication Technical Configuration Guide v1.0 NN48500-589 ___________________________________________________________________________________________________________________________ Nortel Confidential Information Copyright © 2009 Nortel Networks. All Rights Reserved. External...