The config command defines RADIUS server settings for the named WLAN service in the current context, overriding default RADIUS server configuration. The config command is accessible from the wlan:<WLAN-service-name>:auth context of the CLI. Use this command to configure the RADIUS server as an accounting, authentication or MAC authentication server.
radius | Specifies the name of the RADIUS server to configure |
role acct|auth|mac | Specifies the role of the RADIUS server as accounting, authentication, or MAC authentication server, respectively. |
prot CHAP | PAP | MS-CHAP | MS-CHAP2] | Specifies the Authentication type |
The config command is not available when the authentication mode is guestportal. When the authentication mode is disabled, MAC must be enabled for this command to be available. For authentication mode command information, see mode. For mac command information, see mac.
For third party APs SSIDs, this command is only visible when mac is set to enable and only mac authentication is supported.
After executing the config command to configure a RADIUS server, you can proceed to configure additional server attributes such as NAS ID and NAS IP address. When you are finished configuring RADIUS server attributes, use the exit command to return to the wlans:<WLAN-service-name> context.
The following example configures the RADIUS server “radius1” as an authentication server:
EWC.extremenetworks.com:wlans:cnl-AAA:auth# config radius1 role auth prot PAP EWC.extremenetworks.com:wlans:cnl-AAA:auth# show Current selected Radius server radius1 role auth Priority Name Role NAS IP NAS ID Auth Type 1 radius1 auth Use VNS IP address Use VNS name PAP NAS identifier: Use VNS name NAS IP address: Use VNS IP address Authentication type: PAP