set radius-snooping flow

Use this command to provide for the entering of RADIUS client and server session flow entries into the RS flow table.

Syntax

set radius-snooping flow index client-IP-address server-IP-address server-port [secret]

Parameters

index Specifies a numeric index ID for this flow table entry.
client-IP-address Specifies the client IP address for this RS flow table entry.
server-IP-address Specifies the server IP address for this RS flow table entry.
server-port Specifies the RADIUS UDP port to use for this RS flow table entry.
secret (Optional) Specifies the RADIUS secret for this RS flow table entry.

Defaults

If no secret is specified, no secret is used for this flow entry.

Mode

All command modes.

Usage

RADIUS flows defined in the RS flow table are snooped if RS is enabled for both the system and this port.

Flow entries are added to the flow table based upon the entry index value. The first matching entry in the table is the entry used for the continuation of the authentication process.

The standard server UDP port is 1812.

If a secret is configured on the authentication server and not configured here, no validation will occur.

Example

This example creates an index 1 entry in the RADIUS flow table for client 192.10.5.10 and server 192.10.20.1 for the standard UPD port 1812 with a secret mysecret:

System(rw)->set radius-snooping flow 1 192.10.5.10 192.10.20.1 1812 mysecret