Enables RADIUS (Remote Authentication Dial In User Service) accounting.
mgmt-access | Specifies the switch management RADIUS accounting server. |
netlogin | Specifies the network login RADIUS accounting server. |
RADIUS accounting is disabled for both switch management and network login by default.
The RADIUS client must also be enabled.
Before you enable RADIUS accounting on the switch, you must configure the servers used for accounting and configure the authentication string (shared secret) used to communicate with the RADIUS accounting server.
To configure the RADIUS accounting servers, use the following command:
configure radius-accounting {mgmt-access | netlogin} [primary | secondary] server [ipaddress |hostname] {tcp_port} client-ip [ipaddress] {vr vr_name}To configure the shared secret, use the following command:
configure radius-accounting {mgmt-access | netlogin} [primary | secondary] shared-secret {encrypted} stringIf you do not specify a keyword, RADIUS accounting is enabled on the switch for both management and network login.
Use the mgmt-access keyword to enable RADIUS accounting for switch management functions.
Use the netlogin keyword to enable RADIUS accounting for network login.
The following command enables RADIUS accounting on the switch for both management and network login:
enable radius-accounting
The following command enables RADIUS accounting for network login:
enable radius-accounting netlogin
This command was first available in ExtremeXOS 10.1.
The mgmt-access and netlogin keywords were added in ExtremeXOS 11.2.
This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X590, X620, X690, X870 series switches.