radius server host

Add a Remote Access Dial-In User Services (RADIUS) server to enable RADIUS service on the switch.

Syntax

default radius server host WORD<0-255> used-by {cli | eapol | endpoint-tracking | snmp | web} [acct-enable | acct-port | enable | key | port | priority | retry | secure-enable | secure-log-level | secure-mode | secure-profile | timeout]
no radius server host WORD<0-255> used-by {cli | eapol | endpoint-tracking | snmp | web} [acct-enable | acct-port | enable | secure-enable]
radius server host WORD<0-255> key WORD<0-32> [acct-enable | acct-port <1-65536> | enable | port <1-65536> | priority <1-10> | retry <0-6> | secure-enable |secure-log-level <critical | debug | error | info | warning> | secure-mode <dtls | tls> |secure-profile WORD<1-16> | timeout <1-180> | used-by {cli | eapol | endpoint-tracking | snmp | web}]
radius server host WORD<0-255> used-by {cli | eapol | endpoint-tracking | snmp | web} [acct-enable | acct-port <1-65536> | enable | key WORD<0-32> | port <1-65536> | priority <1-10> | retry <0-6> | secure-enable |secure-log-level <critical | debug | error | info | warning> | secure-mode <dtls | tls> |secure-profile WORD<1-16> | timeout <1-180>]

acct-enable

Enables Remote Dial-In User Services (RADIUS) accounting on this server. The default is enabled.

acct-port <1-65536>

Configures a UDP port of the Remote Dial-In User Services (RADIUS) accounting server. The default is 1813.

enable

Enables this server.

host WORD <0-255>

Creates a host server. WORD <0-255> specifies the IPv4 address, IPv6 address, or FQDN of the host server

key WORD<0-32>

Configures a secret key.

port <1-65536>

Configures a UDP port of the Remote Dial-In User Services (RADIUS) server. The default is 1812.

priority <1-10>

Configures the priority value for this server. The default is 10.

retry <0-6>

Configures the maximum number of authentication retries. The default is 1.

secure-enable

Enable secure mode on the server. The default is disabled.

secure-log-level <critical | debug | error | info | warning>

Specifies the RADIUS secure server log severity level. The default is error.

secure-mode <dtls | tls>

Specifies the protocol for establishing the secure connection with the server. The default is TLS.

secure-profile WORD<1-16>

Specifies the secure profile name.

timeout <1-180>

Configures the number of seconds before the authentication request times out. The default is 8.

used-by {cli | eapol | endpoint-tracking | snmp | web}

Configures how the server functions:

cli - configures the server for CLI authentication.
eapol - configures the server for Extensible Authentication Protocol over LAN (EAPoL) authentication
endpoint-tracking - configures the server for Endpoint Tracking authentication
snmp - configures the server for Simple Network Management Protocol (SNMP) accounting
web - configures the server for web authentication

The default is cli.

None

Global Configuration

used-by endpoint-tracking does not apply to all hardware platforms. For more information about feature support, see Fabric Engine and VOSS Feature Support Matrix.