Understanding the Switched NEM
Switched NEM Features Overview
Installing or Replacing the Switched NEM
Verifying the Switched NEM Installation
Verify Installation With the CMM ILOM Web Interface
Verify Installation With the CMM ILOM CLI
Finish the Switched NEM Installation
Install the Fabric Expansion Module in the Server Blade
Installing or Removing SFP+ or QSFP Optical Transceiver Modules
Install an SFP+ or QSFP Optical Transceiver Module
Remove an SFP+ or QFSP Optical Transceiver Module
Managing the NEM Remotely (ILOM)
Configuring an Externally Accessible IP Address on the NEM
Connecting to the NEM ILOM Through the CMM ILOM
Configure SEFOS User Privileges
Special Considerations for RADIUS Users
Backing Up and Restoring the ILOM and SEFOS Configuration
The following example shows how to configure the FreeRADIUS server to support a RADIUS client on the switch. The actual syntax might differ depending on the RADIUS server you use.
# -*- text -*- # # Oracle VSA # # $Id$ # VENDOR Oracle 111 BEGIN-VENDOR Oracle ATTRIBUTE Sefos-Fs-Privilege 225 integer ATTRIBUTE Ilom-Role 226 string END-VENDOR Oracle
Generally, the server must ensure that the fs_privilege setting for a user is sent to the client in the Access-Accept message in the following format:
Type = 26 Length = 12 Vendor-Id = 111 Type = 225 Length = 6 Value = <Sefos-Fs-Privilege value from raddb/users file> Type = 26 Length = 21 Vendor-Id = 111 Type = 226 Length = 15 Value = <Ilom-Role value from raddb/users file>
user-john Sefos-Fs-Privilege = 15, Ilom-Role = "Operator" user-doe Sefos-Fs-Privilege = 1 Ilom-Role = "u"
The fs_privilege values that are provided in this file must be integers.
The ILOM Role values must be strings, even if they are single character role values. Also, to combine more than one ILOM role values, single letter designations must be used. For example, Ilom-Role = ”auc”, Ilom-Role = “aucro”, etc. In such cases, using the full form of roles is not allowed. For example, Ilom-Role = ”Administrator,User,Console” is not allowed.
user-john # Place additional attributes or $INCLUDEs here. They will # over-ride the definitions in the pre-defined dictionaries. # # See the ’man’ page for ’dictionary’ for information on # the format of the dictionary files. $INCLUDE /usr/local/share/freeradius/dictionary.oracle
Note - Refer to the Oracle Integrated Lights Out Manager (ILOM) 3.0 Getting Started Guide for more information about configuring your system for RADIUS.