Reference v4.1.0 Instruction Manual

600 Network OS Command Reference
53-1003115-01
radius-server
2
radius-server
Configures the Remote Authentication Dial-In User Service (RADIUS) server.
Synopsis radius-server host {ip-address | host_name} [auth-port portnum] [protocol {chap|pap |peap}]
[key shared_secret] [encryption-level value_level] [timeout sec] [retries num]
no radius-server host hostname| ip-address
Operands host {ipaddr | host_name}
Specifies the IP address or host name of the RADIUS server. IPv4 and IPv6
addresses are supported. The maximum supported length for the RADIUS
hostname is 40 characters.
auth-port portnum Specifies the user datagram protocol (UDP) port used to connect the
RADIUS server for authentication. The valid range is 0 through 65535. The
default port is 1812.
protocol {chap | pap | peap}
Specifies the authentication protocol. Parameters include CHAP, PAP, or
PEAP-MSCHAP. The default is CHAP.
key shared_secret The text string that is used as the shared secret between the switch and
the RADIUS server. The default is sharedsecret.
The exclamation mark (!) is supported both in RADIUS and TACACS+
servers, and you can specify the shared secret string in either double
quotation marks or use the escape character (\). For example: "secret!key"
or secret\!key.
encryption-level
value_level Designates the encryption level for the shared secret key operation. This
operand supports JITC certification and compliance. The range of valid
values is from 0 through 7, with 0 being clear text and 7 being the most
heavily encrypted. The default value is 0.
timeout sec The time to wait for the RADIUS server to respond, in seconds. The default
is 5 seconds.
retries num The number of attempts allowed to connect to a RADIUS server. The default
is 5 attempts.
Defaults The following are the default values of the RADIUS server settings:
• host: There is no default for the host:
• auth-port: UDP port 1812
• timeout: 5 seconds
• retransmit: 5 attempts
• encryption-level 0
• key: sharedsecret
• protocol: CHAP
Command Modes Global configuration mode