Users Guide

Security Commands 1022
Command Mode
Global Configuration mode
User Guidelines
This command does not alter the address in the IP header in Access-Requests
transmitted to the RADIUS server. It only configures the NAS-IP-Address
attribute sent to the RADIUS server inside the RADIUS Access-Request
packet. This capability is useful when configuring multiple RADIUS clients
(switches) to simulate a single RADIUS client for scalability. The RADIUS
Acct-Session-Id may overlap if multiple switches are configured with the
same NAS-IP-Address.
The configured NAS-IP-Address need not be the same as the IPv4 source
address transmitted in the IP header. Use the radius server source-ip
command to configure the IPv4 source address transmitted in the IP header.
Example
The following example sets the NAS IP address RADIUS attribute 4 to
192.168.10.22.
console(config)#radius server attribute 4 192.168.10.22
radius server attribute 6
Use the radius server attribute 6 command to configure the use of the
RADIUS Service-Type attribute.
Syntax
radius server attribute 6 {on-for-login-auth|mandatory}
no radius server attribute 6 {on-for-login-auth|mandatory}
Default Configuration
By default, the switch does not send the Service-Type attribute to the
RADIUS server in the Access-Request packets. By default, the switch ignores
the Service-Type received in Access-Accept packets.