Users Guide

Security Commands 1034
Server IP address — 192.168.10.1
Server Name — name1
Type — primary
console(config)#radius server 192.168.10.1
console(config-auth-radius)#name name1
console(config-auth-radius)#primary
The following shows an example configuration with two servers (list1 and
list2), each of which has a Primary and Secondary IP addresses:
console(config)#show aaa servers authentication
* Host Address Server Name Port Type
---- ------------ ----------- --------- -------
1.2.3.1 list1 1812 Primary
4.3.2.2 list2 1812 Secondary
4.3.2.1 list2 1812 Primary
1.2.3.5 list1 1812 Secondary
1.2.3.4 list1 1812 Secondary
* currently selected server
radius server key
Use the radius server key command to set the authentication and encryption
key for all RADIUS communications between the switch and the RADIUS
server. Use the no form of the command to disable the key.
Syntax
radius server key [ 0 | 7 ]key-string
no radius server key
• 0—The key string that follows is the unencrypted shared secret. The
length is 1–128 characters.
• 7—The key string that follows is the encrypted shared secret. The length is
exactly 256 characters.
• key-string — The key string in encrypted or unencrypted form. In
encrypted form, it must be 256 characters in length. In unencrypted form,
it may be up to 128 characters in length.