Administrator Guide

Security Commands 935
Syntax
radius-server attribute 4
ip-address
no radius-server attribute 4
ip-address
— Specifies the IPv4 address to be used as the RADIUS
attribute 4, the NAS-IP-Address.
Default Configuration
If a RADIUS server has been configured on the switch, the default NAS-IP-
Address sent to the RADIUS server is the address of the switch or the address
of the interface over which the Access-Request is sent.
Command Mode
Global Configuration mode
User Guidelines
This command does not alter the address in the IP header in Access-Requests
transmitted to the RADIUS server. It only configures the NAS-IP-Address
attribute sent to the RADIUS server inside the RADIUS Access-Request
packet. This capability is useful when configuring multiple RADIUS clients
(switches) to simulate a single RADIUS client for scalability. The RADIUS
Acct-Session-Id may overlap if multiple switches are configured with the
same NAS-IP-Address.
The configured NAS-IP-Address need not be the same as the IPv4 source
address transmitted in the IP header. Use the radius-server source-ip
command to configure the IPv4 source address transmitted in the IP header.
Example
The following example sets the NAS IP address RADIUS attribute 4 to
192.168.10.22.
console(config)#radius-server attribute 4 192.168.10.22
radius-server attribute 6
Use the radius-server attribute 6 command to enable the switch to send the
RADIUS Service-Type attribute in authentication messages sent to the
authentication server.
2CSNXXX_SWUM204.book Page 935 Monday, January 25, 2016 1:25 PM