Users Guide

Security Commands 951
(switches) to simulate a single RADIUS client for scalability. The RADIUS
Acct-Session-Id may overlap if multiple switches are configured with the
same NAS-IP-Address.
The configured NAS-IP-Address need not be the same as the IPv4 source
address transmitted in the IP header. Use the radius server source-ip
command to configure the IPv4 source address transmitted in the IP header.
Example
The following example sets the NAS IP address RADIUS attribute 4 to
192.168.10.22.
console(config)#radius server attribute 4 192.168.10.22
radius server attribute 6
Use the radius server attribute 6 command to configure the use of the
RADIUS Service-Type attribute.
Syntax
radius server attribute 6 {on-for-login-auth|mandatory}
no radius server attribute 6 {on-for-login-auth|mandatory}
Default Configuration
By default, the switch does not send the Service-Type attribute to the
RADIUS server in the Access-Request packets. By default, the switch ignores
the Service-Type received in Access-Accept packets.
Command Mode
Global Configuration
User Guidelines
on-for-login—This parameter globally configures the switch to send the
RADIUS Service-Type attribute in the Access-Request message sent to all
RADIUS authentication servers. The switch sends the Service-Type value
Administrative (6) for administrators attempting to access the switch console
and sends Service-Type value Login (1) for users attempting to access the
network.