Qtech QSW-9000-01 [11/24] Radius

01:05:57: %TACACS+-5-TACACS+: 3957:31: Ascii author successfully.User:user15 port:tty1 new

privilege:15

01:05:57: %TACACS+-5-TACACS+: 3957:31: Ascii login successfully.User:user15 port:tty1

00:33:23: %TACACS+-5-TACACS+: 2003:4: Ascii stop account successfully.User:user15 port:tty0

new privilege:-1

00:33:22: %CMDLINE-5-LOGOUT: The local client (user15) has logged out at terminal 0(console).

8. RADIUS

Схема:

E 0/9

RADIUS server

ПК

QSW-9000-01

E 0/10

Tagged VLAN 200

Untagged

Цель теста: Проверка возможности авторизации администраторов по протоколу

RADIUS.

Ожидаемый результат: Администратор авторизуется на коммутаторе по протоколу

RADIUS

Краткая конфигурация коммутатора QSW-9000-01

aaa

radius host test

primary-auth-ip 192.168.0.1 1812

primary-acct-ip 192.168.0.1 1813

auth-secret-key testing123

acct-secret-key testing123

exit

accounting-on enable 10

exit

Пример:

Tue Feb 12 10:24:07 2013 : Info: Ready to process requests.

rad_recv: Access-Request packet from host 192.168.0.10 port 1812, id=15, length=172

User-Name = "test"

CHAP-Password = 0x102400683f1e4e9bcc0f5093e2674770b0

CHAP-Challenge = 0x329c375210463a951e717e36538f4d57

NAS-Identifier = "001fce1099ab"

NAS-Port-Id = "slot=0;subslot=0;port=0;vlanid=1"

NAS-Port = 1

Calling-Station-Id = "00:00:00:00:00:00"