For the Brocade8Gbps FC Switch I have used the RADIUS (IETF) from the RADIUS list presented by Cisco ACS (Juniper, Nortel etc). Now, I know that the Internet Engineering Task Force (IETF) draft standard specifies a method for communicating vendor-specific attributes (VSAs) between the network access server and the RADIUS server. The IETF uses attribute 26. VSAs allow vendors to support their own extended attributes that are not suitable for general use. The Cisco RADIUS implementation supports one vendor-specific option using the format recommended in the specification. The Cisco vendor ID is 9, and the supported option is vendor type 1, which is named cisco-avpair. The value is a string with the following format:
protocol : attribute separator value *
Where protocol is a Cisco attribute for a particular type of authorization, separator is = (equal sign) for mandatory attributes, and * (asterisk) is for optional attributes.
For the Cisco MDS/Nexus I have specify in the TACACS attributes the following: cisco-av-pair=shell:roles="network-admin" in order the authentication to work.
When I login to the Brocade8Gbps-FC switch via SSH with the username from Cisco ACS I get the following :
So, the authentication of Brocade8Gbps-FC switch in Cisco ACS is working, but I get the default profile “user”. I am wondering where I have to specify the RADIUS attributes in order to send the profile to the Brocade FC switch and what I have to send to the Brocade8Gbps-FC switch? Something similar with cisco-av-pair=shell:roles="network-admin" ?
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...