Special Considerations for RADIUS Users

In addition to the typical ILOM settings, /SP/clients/radius/fs_privilege has been added to allow and control SEFOS access by RADIUS users. This new attribute sets the default fs_privilege setting for all RADIUS users and supports the same values as can be set when creating an ILOM user account (1 for read only or 15 for full administrative privileges).

-> show /SP/clients/radius/
 
/SP/clients/radius
   Targets: 
   Properties:
       address = 10.7.57.118
       defaultrole = Operator
       fs_privilege = 1
       port = 1812
       secret = *****
       state = enabled 
 
   Commands: 
       cd
       set
       show

The switch supports per-user settings for RADIUS users through Vendor Specific Attributes (VSA). Both the SEFOS administrative privilege level and the ILOM role can be set using per-user VSAs configured on the RADIUS server.