Specifying the RADIUS Accounting Server Addresses

Before the RADIUS (Remote Authentication Dial In User Service) client software can communicate with a RADIUS accounting server, you must specify the server address in the client software. You can specify up to two accounting servers, and you can use either an IP address or a host name to identify each server.

To specify RADIUS accounting servers, use the following command:

configure radius-accounting { mgmt-access | netlogin } [ primary | secondary | index ] server [ host_ipaddr | host_ipV6addr | hostname] {udp_port} client-ip [ client_ipaddr | client_ipV6addr] {vr vr_name} {shared-secret {encrypted} secret}

The default port value for accounting is 1813. The client IP address is the IP address used by the RADIUS server for communicating back to the switch.

To configure the primary RADIUS accounting server, specify primary. To configure the secondary RADIUS accounting server, specify secondary.

By default, switch management and network login use the same primary and secondary RADIUS servers for accounting. To specify one pair of RADIUS accounting servers for switch management and another pair for network login, use the mgmt-access and netlogin keywords.

Published March 2020prev | next

Email this topic

Print this page Print this page

Leave feedback Feedback