Users Guide

• route-map — Accesses route-map mode.
• router — Accesses router-bgp and router-ospf modes.
• line — Accesses line-vty mode.
• priv-lvl privilege-level — Enter the number of a privilege level, from 2 to 14.
• command-string — Enter the commands supported at the privilege level.
Defaults Not configured
Command Mode CONFIGURATION
Usage Information
For users assigned to sysadmin, netadmin, and secadmin roles, you cannot configure a privilege level less
than 2.
If a command that you associate with a privilege level has a space, enter the command in double quotes ("). If a
command does not have a space or if it has keywords separated by a hyphen, double quotes are not required.
The no version of this command removes a command from a privilege level.
Example
OS10(config)# privilege exec priv-lvl 3 "configure terminal"
OS10(config)# privilege configure priv-lvl 3 "interface ethernet"
OS10(config)# privilege interface priv-lvl "ip address"
OS10(config)# privilege configure priv-lvl 3 route-map
OS10(config)# privilege route-map priv-lvl 3 "set local-preference"
Supported
Releases
10.4.3.0 or later
radius-server host
Configures a RADIUS server and the key used to authenticate the switch on the server.
Syntax
radius-server host {hostname | ip-address} key {0 authentication-key | 9
authentication-key | authentication-key} [auth-port port-number]
Parameters
• hostname — Enter the host name of the RADIUS server.
• ip-address — Enter the IPv4 (A.B.C.D) or IPv6 (x:x:x:x::x) address of the RADIUS server.
• key 0 authentication-key — Enter an authentication key in plain text. A maximum of 42 characters.
• key 9 authentication-key — Enter an authentication key in encrypted format. A maximum of 128
characters.
• authentication-key — Enter an authentication in plain text. A maximum of 42 characters. It is not
necessary to enter
0 before the key.
• auth-port port-number — (Optional) Enter the UDP port number used on the server for
authentication, from 0 to 65535, default 1812.
Default Not configured
Command Mode CONFIGURATION
Usage Information The authentication key must match the key configured on the RADIUS server. You cannot enter spaces in the
key. The show running-configuration output displays both unencrypted and encrypted keys in encrypted
format. Configure global settings for the timeout and retransmit attempts allowed on RADIUS servers using the
radius-server retransmit and radius-server timeout commands.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S). Also
supported in SmartFabric mode starting in release 10.5.0.1.
The no version of this command removes a RADIUS server configuration.
Example
OS10(config)# radius-server host 1.5.6.4 key secret1
Supported
Releases
10.2.0E or later
Security 951