radius server host

Syntax

• default radius server host WORD<0-113> used-by {cli | eapol | endpoint-tracking | snmp | web} [acct-enable | acct-port | enable | key | port | priority | retry | secure-enable | secure-log-level | secure-mode | secure-ocsp | secure-profile | timeout]

• no radius server host WORD<0-113> used-by {cli | eapol | endpoint-tracking | snmp | web} [acct-enable | acct-port | enable | secure-enable | secure-ocsp]

• radius server host WORD<0-113> key WORD<0-32> [acct-enable | acct-port <1-65536> | enable | port <1-65536> | priority <1-10> | retry <0-6> | secure-enable |secure-log-level <critical | debug | error | info | warning> | secure-mode <dtls | tls> |secure-profile WORD<1-16> | timeout <1-180> | used-by {cli | eapol | endpoint-tracking | snmp | web}]

• radius server host WORD<0-113> used-by {cli | eapol | endpoint-tracking | snmp | web} [acct-enable | acct-port <1-65536> | enable | key WORD<0-32> | port <1-65536> | priority <1-10> | retry <0-6> | secure-enable |secure-log-level <critical | debug | error | info | warning> | secure-mode <dtls | tls> | secure-ocsp | secure-profile WORD<1-16> | timeout <1-180>]

Command Parameters

acct-enable

Enables Remote Dial-In User Services (RADIUS) accounting on this server. The default is enabled.

acct-port <1-65536>

Configures a UDP port of the Remote Dial-In User Services (RADIUS) accounting server. The default is 1813.

enable

Enables this server.

host WORD <0-113>

Creates a host server. WORD <0-113> specifies the IPv4 address, IPv6 address, or FQDN of the host server

key WORD<0-32>

Configures a secret key.

port <1-65536>

Configures a UDP port of the Remote Dial-In User Services (RADIUS) server. The default is 1812.

priority <1-10>

Configures the priority value for this server. The default is 10.

retry <0-6>

Configures the maximum number of authentication retries. The default is 1.

secure-enable

Enable secure mode on the server. The default is disabled.

secure-ocsp

Enable RADIUS Online Certificate Status Protocol (OCSP) checking for this server. The default is disabled.

secure-log-level <critical | debug | error | info | warning>

Specifies the RADIUS secure server log severity level. The default is error.

secure-mode <dtls | tls>

Specifies the protocol for establishing the secure connection with the server. The default is TLS.

secure-profile WORD<1-16>

Specifies the secure profile name.

timeout <1-180>

Configures the number of seconds before the authentication request times out. The default is 8.

used-by {cli | eapol | endpoint-tracking | snmp | web}

Configures how the server functions:

• cli - configures the server for CLI authentication.

• eapol - configures the server for Extensible Authentication Protocol over LAN (EAPoL) authentication

• endpoint-tracking - configures the server for Endpoint Tracking authentication

• snmp - configures the server for Simple Network Management Protocol (SNMP) accounting

• web - configures the server for web authentication

The default is cli.

Default

None

Command Mode

Global Configuration

Usage Guidelines

used-by endpoint-tracking does not apply to all hardware platforms. For more information about feature support, see Fabric Engine and VOSS Feature Matrix.