Alcatel-Lucent 8950 AAA Operation & User’s Manual

User’s Guide | Release 6.0 365-360-001R6.0 ISSUE 1 DEC 2008

The information presented is subject to change without notice. Alcatel-Lucent assumes no responsibility for inaccuracies contained herein. Copyright © 2008 Alcatel-Lucent. All Rights Reserved.

365-360-001R6.0 Issue 1 December 2008 ............................................................................................................................................................................................................................................................ Contents About this information product Where to go First .......................................................................................................................................1-ii How This Manual Is Organized ...............................................................................................................1-iii Conventions ..............................................................................................................................................1-vi Recommended Reading ...........................................................................................................................1-vii Obtaining Technical Support ...................................................................................................................1-vii Part 1: Configuration Tools Navigation Pane 1 Introduction to 8950 AAA What is 8950 AAA? .................................................................................................................................. 1-1 RADIUS Terms Explained ........................................................................................................................ 1-3 2 8950 AAA Server Management Tool Overview Purpose of the Server Management Tool .................................................................................................. 2-1 Starting the Server Management Tool ....................................................................................................... 2-2 The Server Management Tool User Interface ........................................................................................... 2-4 3 Server Management Tool Command Set SMT menus and their commands .............................................................................................................. 3-1 Managing Data in SMT Panels ............................................................................................................... 3-11 Sizing Table Columns ............................................................................................................................. 3-13 Installing the PolicyAssistant and the Policy Flow Editor ...................................................................... 3-13 4 Managing 8950 AAA Servers Configuring Server Properties ................................................................................................................... 4-1 Policy Server tab ....................................................................................................................................... 4-2 Universal State Server tab ....................................................................................................................... 4-28 Configuration Server tab ......................................................................................................................... 4-38 5 Configuring 8950 AAA Client Properties Introduction ............................................................................................................................................... 5-1 Configuring Clients ................................................................................................................................... 5-2 The Radius Clients tab .............................................................................................................................. 5-4

The TACACS+ Clients tab ...................................................................................................................... 5-11 The Client Classes tab ............................................................................................................................. 5-14 6 Configuring 8950 AAA Realm Routing Table Properties Configuring Realm Routing Table ............................................................................................................ 6-1 7 Configuring 8950 AAA Remotely Remote Configuration ............................................................................................................................... 7-1 8 Using the 8950 AAA Policy Flow Editor Policy Flow Editor .................................................................................................................................... 8-1 Policy Flow Files ....................................................................................................................................... 8-3 Method Configuration ............................................................................................................................... 8-4 Method Dispatch Section .......................................................................................................................... 8-9 9 Using the 8950 AAA Policy Assistant in Server Management Tool Understanding PolicyFlow, the PolicyAssistant, and the Policy Wizard .................................................. 9-2 Installing the PolicyAssistant .................................................................................................................... 9-2 Preparing to Create Your First Policy ....................................................................................................... 9-3 Using the Policy Wizard ........................................................................................................................... 9-4 Understanding and Creating Attribute Sets ............................................................................................ 9-16 Adding Attribute Sets to Your Policy ...................................................................................................... 9-19 Creating Attribute Sets ............................................................................................................................ 9-20 Defining a Failure Mode ......................................................................................................................... 9-23 Reviewing Your Policy ............................................................................................................................ 9-25 Using the PolicyAssistant ........................................................................................................................ 9-25 Saving Your Policies ............................................................................................................................... 9-30 Advanced Authentication Options .......................................................................................................... 9-30 Advanced Attribute Set Options ............................................................................................................. 9-37 10 Configuring 8950 AAA USSv2 USSv2 Configuration .............................................................................................................................. 10-1 11 Configuring 8950 AAA Operators Administering the 8950 AAA System .................................................................................................... 11-1 8950 AAA Operators Panel .................................................................................................................... 11-3 Adding an Operator ............................................................................................................................... 11-11

Modifying a System Operator ............................................................................................................... 11-16 12 Configuring Simple Address Manager Simple Address Manager Configuration ................................................................................................. 12-1 13 Configuring USS Address Manager USS Address Manager Configuration ..................................................................................................... 13-1 Part II: Stats Collecting Navigation Pane 14 Stats Collector The Stats Collector .................................................................................................................................. 14-1 Stats Collector Panel ............................................................................................................................... 14-2 15 Configuring Reports The Configure Reports Panel .................................................................................................................. 15-1 Part III: Logging Tools Navigation Pane 16 Message Logging 8950 AAA Message Overview ................................................................................................................ 16-1 Logging Tools .......................................................................................................................................... 16-2 Server Log Messages .............................................................................................................................. 16-3 Log Channels ........................................................................................................................................... 16-6 Log Channel Configuration Panel Tabs ................................................................................................ 16-14 Notes on the Naming of Size Based Files ............................................................................................. 16-19 Notes on the Naming of Time Based Files ............................................................................................ 16-21 Log Rules .............................................................................................................................................. 16-32 Part IV: Monitoring Tools Navigation Pane 17 Server Statistics Monitoring Server Statistics .................................................................................................................... 17-1 Server Statistics Panel ............................................................................................................................. 17-2 Sessions/ Counters/ Indices Panel ......................................................................................................... 17-28 USS Address Statistics Panel ................................................................................................................ 17-31 18 Using LiveAdministrator 8950 AAA LiveAdministrator ................................................................................................................. 18-2 Accessing the LiveAdministrator Panel .................................................................................................. 18-2