Access Security Guide K/KA/KB.15.15

The time window in seconds within which the received dynamic authorization
requests are considered to be current and accepted for processing. A zero value
means there is no time limit. A non-zero value indicates that the even-timestamp
attribute is expected as part of all Change of Authorization and Disconnect request
messages. If the timestamp attribute is not present the message is dropped.
Default: 300 seconds.
no radius-server host < ip-address> key
Use the no form of the command to remove the key for a specified server.
Example
Suppose you have configured the switch as shown in Figure 110 (page 149) and you now need
to make the following changes:
1. Change the encryption key for the server at 10.33.18.127 to "source0127".
2. Add a RADIUS server with an IP address of 10.33.18.119 and a server-specific encryption
key of "source0119".
Figure 110 Sample configuration for RADIUS server before changing the key and adding another
server
To make these changes, perform the following:
Figure 111 Sample configuration for RADIUS server after changing the key and adding another
server
To change the order in which the switch accesses RADIUS servers, see “Changing RADIUS-server
access order” (page 179).
Configuring 149