Users Guide

Security Commands 1121
• host name —The fully qualified domain name (FQDN) of a CoA client.
Maximum length of a host FQDN is 255 characters.
• server-key —Sets the shared secret to verify client COA requests for this
server.
• 0—An unencrypted key is to be entered.
• 7—An encrypted key is to be entered.
•
key- string —The key string in encrypted or unencrypted form. In encrypted
form, it must be 256 characters in length. In unencrypted form, it may be
up to 128 characters in length. Enclose in key string in quotes to use
special characters or embedded blanks.
Default Configuration
By default, no RADIUS CoA clients are configured.
Command Modes
Dynamic RADIUS Configuration
User Guidelines
Up to 10 dynamic CoA clients can be configured.
The server-key, if configured, overrides the global shared secret for this client
only.
Messages received from a RADIUS CoA client are validated against the
configured servers. Messages received from unconfigured RADIUS CoA
clients are silently discarded.
Command History
Introduced in version 6.2.0.1 firmware.
Example
The following example configures RADIUS servers at 1.1.1.1, 2.2.2.2, and
3.3.3.3 and CoA clients at 3.3.3.3, 4.4.4.4, and 5.5.5.5. It sets the front panel
ports to use multi-auth authentication. CoA is configured for two RADIUS
servers located at 1.1.1.1 and 2.2.2.2 using a global shared secret and a third