show radius-server

Display the Remote Access Dial-In User Services (RADIUS) server information.

Syntax

Default

None

Command Mode

User EXEC

Command Output

The show radius-server command displays the following information:

Output field

Description

NAME

Specifies the RADIUS server name.

USEDBY

Specifies how the server functions. Configures the server for authentication for one of the following:cli

  • cli

  • eapol

  • endpoint-tracking

  • snmp

  • web

SECRET

Specifies the secret key.

PORT

Specifies the RADIUS server UDP port.

PRIO

Specifies the RADIUS server priority.

RETRY

Specifies the maximum number of authentication retries. The default is 3.

TIMEOUT

Specifies the number of seconds before the authentication request times out. The default is 3.

ENABLED

Specifies whether the RADIUS server is enabled.

SECURE ENABLED

Specifies whether RADSec is enabled on the RADIUS server.

SECURE MODE

Specifies the protocol used for secure connection with the server. Possible values are:

  • tls - Transport Layer Security (TLS) encryption over Transmission Control Protocol (TCP)

  • dtls - Datagram Transport Layer Security (DTLS) encryption over User Datagram Protocol (UDP)

The default is tls.

SECURE INSTANCE

Specifies the radsecproxy instance. The default is -1 (the RADIUS server is not configured for RADSec).

SECURE PROFILE

Specifies the secure profile associated with the RADIUS server.

SECURE LOG-LEVEL

Specifies the secure log level. Possible values are:

  • critical

  • debug

  • error

  • info

  • warning

SECURE OCSP

Specifies whether RADIUS Online Certificate Status Protocol (OCSP) checking is enabled or disabled for this server. The default is disabled.

ACCT PORT

Specifies the RADIUS accounting UDP port.

ACCT ENABLED

Specifies whether RADIUS accounting is enabled.

Example

The following example displays RADIUS server information:

Switch:1>show radius-server
=========================================================================================
                                    Radius Server Entries
=========================================================================================
                                                              SECURE  SECURE SECURE   SECURE   SECURE     SECURE  ACCT ACCT    
NAME           USEDBY  SECRET PORT PRIO RETRY TIMEOUT ENABLED ENABLED MODE   INSTANCE PROFILE  LOG-LEVEL  OCSP    PORT ENABLED 
------------------------------------------------------------------------------------------------------------------------------
192.0.2.14     cli     ****** 1812 10   1     8       true    true    tls    0        radsecp  error      false   1813 true    
192.0.2.15     cli     ****** 1812 10   1     8       true    false   tls    -1       default  error      false   1813 true
9039038-00 Rev AA