show radius

show radius {mgmt-access | netlogin} {primary | secondary | index}

Description

Displays the current RADIUS (Remote Authentication Dial In User Service) client configuration and statistics.

Syntax Description

mgmt-access Specifies configuration and statistics for the switch management RADIUS authentication server.
netlogin Specifies configuration and statistics for the network login RADIUS authentication server.
primary Primary server.
secondary Secondary server.
index RADIUS server index.

Default

N/A.

Usage Guidelines

If you do not specify a keyword, configuration details related to both management and network login are displayed. The output from this command displays the status of RADIUS and RADIUS accounting (enabled or disabled) and the primary and secondary servers for RADIUS and RADIUS accounting.

Use the mgmt-access keyword to display only RADIUS configuration details related to management access.

Use the netlogin keyword to only RADIUS configuration details related to network login.

Example

The following sample output displays the current RADIUS client configuration and statistics for both management and network login:

#show radius
Radius Algorithm: standard
Radius Retries: 3
RADIUS dynamic-authorization: disabled
Switch Management Radius: enabled
Switch Management Radius server connect time out: 3 seconds *
Switch Management Radius Accounting: disabled *
Switch Management Radius Accounting server connect time out: 3 seconds *
Netlogin Radius: enabled
Netlogin Radius server connect time out: 3 seconds *
Netlogin Radius Accounting: disabled *
Netlogin Radius Accounting server connect time out: 3 seconds * 

Primary Switch Management Radius server: Status: Active   
        host name     :   
        IP address    :  10.51.1.150   
        Server IP Port:  1812   
        Client address:  10.50.130.152 VR-Mgmt)
        Retries       :  Not Set (Using Default Retry value)
        Timeout       :  Not Set (Using Default Timeout value)   
        shared secret :  @~|ioBnao`ox#s
Access Requests   :  0          Access Accepts    :  0
Access Rejects    :  0          Access Challenges :  0
Access Retransmits:  0          Client timeouts   :  0
Bad authenticators:  0          Unknown types     :  0
Round Trip Time   :  0 

Radius server     :  1001 Status: Active   
        host name     :   
        IP address    :  10.51.1.150   
        Server IP Port:  1812   
        Client address:  10.50.130.152 VR-Mgmt)
        Retries       :  Not Set (Using Default Retry value)    
        Timeout       :  Not Set (Using Default Timeout value)    
        Realm         :  Any   
        shared secret :  @~|ioBnao`ox#s
Access Requests   :  11         Access Accepts    :  5
Access Rejects    :  1          Access Challenges :  0
Access Retransmits:  4          Client timeouts   :  5
Bad authenticators:  0          Unknown types     :  0
Round Trip Time   :  0

History

This command was first available in ExtremeXOS 10.1.

The mgmt-access and netlogin keywords were added in ExtremeXOS 11.2.

The primary and secondary keywords, and index variable were added in ExtremeXOS 16.1

This command was updated to show dynamic authorization status in ExtremeXOS 22.1

Platform Availability

This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X590, X620, X690, X870 series switches.