RADIUS Over IPv6

ArubaOSprovides support forRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.authentication server over IPv6. You can configure an IPv6 host or specify anFQDNFully Qualified Domain Name. FQDN is a complete domain name that identifies a computer or host on the Internet.that can resolve to an IPv6 address forRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.authentication. TheRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server is in IPv4 mode by default. You must enable theRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server in IPv6 mode to resolve the specifiedFQDNFully Qualified Domain Name. FQDN is a complete domain name that identifies a computer or host on the Internet.to IPv6 address.

You can only configure the global IPv6 address as the host for the Radius server in IPv6 mode.

The following procedure describes how to configure an IPv6 host for aRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.服务器。

1.In theMobility Masternode hierarchy, navigate to theConfiguration > Authentication>Auth Serverstab.

2.Select a server name from theServer Groupstable.

3.Select a server name with the server type asRADIUSfromAll Serverstable, to view the server details.

4.To enable theRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server in IPv6 mode clickEnable IPv6check box, in theServer Optionstable.

5.To configure an IPv6 host for the selectedRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server, specify an IPv6 address or anFQDNFully Qualified Domain Name. FQDN is a complete domain name that identifies a computer or host on the Internet.in theIP address/hostnamefield.

6.ClickSubmit.

7.ClickPending Changes.

8.In thePending Changeswindow, select the check box and clickDeploy changes.

To configure an IPv6 address for theNASNetwork Access Server. NAS provides network access to users, such as a wireless AP, network switch, or dial-in terminal server.-IP:

1.Specify an IPv6 address in theNASIPv6field.

2.ClickSubmit.

3.ClickPending Changes.

4.In thePending Changeswindow, select the check box and clickDeploy changes.

The followingCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.commands enable theenable-ipv6parameter.

(host) [mynode] (config) #aaa authentication-server radius IPv6

(host) [mynode] (RADIUS Server "IPv6") #enable-ipv6

Configure an IPv6 address as the host forRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server using the following command:

(host) [mynode] (RADIUS Server "IPv6") #host

The parameter can also be aFQDNFully Qualified Domain Name. FQDN is a complete domain name that identifies a computer or host on the Internet.that can resolve to an IPv6 address.

To resolveFQDNFully Qualified Domain Name. FQDN is a complete domain name that identifies a computer or host on the Internet., you must configure theDNSDomain Name System. A DNS server functions as a phone book for the intranet and Internet users. It converts human-readable computer host names into IP addresses and IP addresses into host names. It stores several records for a domain name such as an address 'A' record, name server (NS), and mail exchanger (MX) records. The Address 'A' record is the most important record that is stored in a DNS server, because it provides the required IP address for a network peripheral or element.server name using theip name-server command.

You can configure an IPv6 address for theNASNetwork Access Server. NAS provides network access to users, such as a wireless AP, network switch, or dial-in terminal server.-IP parameter using the followingCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.command:

(host) [mynode] (RADIUS Server "Ipv6") #nas-ip6

You can configure an IPv6 address for the Source Interface parameter using the followingCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.command:

(host) [mynode] (RADIUS Server "Ipv6") # source-interface vlan ip6addr

Use the followingCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.command to configure an IPv6 address for the globalNASNetwork Access Server. NAS provides network access to users, such as a wireless AP, network switch, or dial-in terminal server.IP which themanaged deviceuses to communicate with all theRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.servers:

(host) [mynode] (config) #ipv6 radius nas-ip6

You can also configure an IPv6 global source-interface for all theRADIUSRemote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.server requests using the following commands:

(host) [mynode] (config) #ipv6 radius source-interface loopback

(host) [mynode] (config) #ipv6 radius source-interface vlan