topic Re: RADIUS used-by limitations in ExtremeSwitching (VSP/Fabric Engine)

RADIUS used-by limitations

bfaltys — Wed, 20 Oct 2021 22:44:13 GMT

It appears that, when configuring a RADIUS server, you can only select one of the options in the "used-by" portion of the command. This seems like an odd limitation. Am I missing something? Is it possible to use the same server for CLI & Web access authentication? It looks like if you try to add one it simply overwrites the other. I don't see the purpose of needing a separate server for each of those.

Re: RADIUS used-by limitations

Ludovico_Steven — Thu, 21 Oct 2021 10:17:42 GMT

You have to create separate entries. In the long run it is cleaner, as you could end up with many used-by, not just cli and web, but eapol, ept, snmp..

Re: RADIUS used-by limitations

bfaltys — Thu, 21 Oct 2021 15:36:24 GMT

Ok, I got it to work by adding "used-by cli" and then entering again for "used-by web".

radius server host <SERVER1-IP> key <KEY> used-by cli
radius server host <SERVER1-IP> key <KEY> used-by web
radius server host <SERVER2-IP> key <KEY> used-by cli
radius server host <SERVER2-IP> key <KEY> used-by web
radius enable