Controlling Telnet Access to ARN Router via RADIUS

[valarian]

Hello all,
I have a question regarding ARN routers. Is it possible to have a RADIUS server control the telnet access to a ARN router? The ARN obviously supports RADIUS, but all I found about it on nortel.com refers to RADIUS controlling PPP connections and remote dial-in.

Anyone out there having solved this yet?

Thanks
Mike

 

[putney]

I've been doing RADIUS authentication witn ARN/ASN routers for quite a while. All you have to do is enable it in the router, just don't enable the user manager lock until your sure it's working.

Have Radius return "Vendor Specifc attribute number 26" with a value of "2" give write access to the Router.

I don't think I locked it down any further than this. It seems to work as long as it can contact Radius. If Radius fails, I believe you can use the ARN password.

If you need any more specifics, let me know.