radius server host

Syntax

• default radius server host WORD<0-46> used-by {cli|eapol|endpoint-tracking|snmp|web} [acct-enable|acct-port|enable|key|port|priority|retry|secure-enable|secure-log-level|secure-mode|secure-profile|source-ip|timeout]

• no radius server host WORD<0-46> used-by {cli|eapol|endpoint-tracking|snmp|web} [acct-enable|acct-port|enable|secure-enable]

• radius server host WORD<0-46> {key WORD<0-32>|used-by {cli|eapol|endpoint-tracking|snmp|web}}

• radius server host WORD<0-46> key WORD<0-32> [acct-enable|acct-port <1-65536>|enable|port <1-65536>|priority <1-10>|retry <0-6>|secure-enable|secure-log-level|secure-mode|secure-profile|source-ip WORD <0-46>|timeout <1-20>|used-by {cli|eapol|endpoint-tracking|snmp|web}]

• radius server host WORD<0-46> used-by {cli|eapol|endpoint-tracking|snmp|web} [acct-enable|acct-port|enable|key|port|priority|retry|secure-enable|secure-log-level|secure-mode|secure-profile|source-ip|timeout]

Command Parameters

acct-enable

Enables Remote Dial-In User Services (RADIUS) accounting on this server. The default is enabled.

acct-port <1-65536>

Configures a UDP port of the Remote Dial-In User Services (RADIUS) accounting server. The default is 1816.

enable

Enables this server.

host WORD <0-46>

Creates a host server. Remote Dial-In User Services (RADIUS) supports IPv4 addresses. WORD <0-46> specifies an address in A.B.C.D or x:x:x:x:x:x:x:x format.

key WORD<0-32>

Configures a secret key in the range of 0-20 characters.

port <1-65536>

Configures a UDP port of the Remote Dial-In User Services (RADIUS) server.

priority <1-10>

Configures the priority value for this server. The default is 10.

retry <0-6>

Configures the maximum number of authentication retries. The default is 3.

secure-enable

Enable secure mode on the server.

secure-log-level

Specifies the RADIUS secure server log severity level. Possible values are:

• critical

• debug

• error

• info

• warning

secure-mode

Specifies the protocol for establishing the secure connection with the server.

secure-profile

Specifies the secure profile name.

source-ip WORD <0-46>

Configures an IP address as the source address when transmitting RADIUS packets. Remote Dial-In User Services (RADIUS) supports IPv4 addresses. WORD <0-46> specifies an address in A.B.C.D or x:x:x:x:x:x:x:x format.

timeout <1-20>

Configures the number of seconds before the authentication request times out. The default is 8.

used-by {cli|eapol|endpoint-tracking|snmp|web}

Configures how the server functions:

• cli - configures the server for CLI authentication

• eapol - configures the server for Extensible Authentication Protocol over LAN (EAPoL) authentication

• endpoint-tracking - configures the server for Endpoint Tracking authentication

  used-by endpoint-tracking does not apply to all hardware platforms. For more information about feature support, see VOSS Feature Support Matrix.

• snmp - configures the server for Simple Network Management Protocol (SNMP) accounting

• web - configures the server for web authentication

The default is cli.

Default

None

Command Mode

Global Configuration

Usage Guidelines

The secure-enable, secure-log-level, secure-mode, and secure-profile parameters are not supported on the VSP 8600 Series.

The source-ip WORD <0-46> parameter is only supported on the VSP 8600 Series.