API Guide

Example
OS10(config)# ip radius source-interface ethernet 1/1/10
Supported
Releases
10.4.3.1 or later
ip tacacs source-interface
Specifies the interface whose IP address is used as the source IP address for user authentication with a TACACS+ server.
Syntax
ip tacacs source-interface interface
Parameters interface:
● ethernet node/slot/port[:subport] — Enter a physical Ethernet interface.
● loopback number — Enter a Loopback interface, from 0 to 16383.
● mgmt 1/1/1 — Enter the management interface.
● port-channel channel-id — Enter a port-channel ID, from 1 to 28.
● vlan vlan-id — Enter a VLAN ID, from 1 to 4093.
Default Not configured.
Command Mode CONFIGURATION
Usage
Information
By default, no source interface is configured. OS10 selects the source IP address as the IP address of the
interface from which a packet is sent to the TACACS+ server. The no version of this command removes
the configured source interface.
Example
OS10(config)# ip tacacs source-interface ethernet 1/1/10
Supported
Releases
10.4.1.0 or later
radius-server host
Configures a RADIUS server and the key used to authenticate the switch on the server.
Syntax
radius-server host {hostname | ip-address} key {0 authentication-key | 9
authentication-key | authentication-key} [auth-port port-number]
Parameters
● hostname — Enter the host name of the RADIUS server.
● ip-address — Enter the IPv4 (A.B.C.D) or IPv6 (x:x:x:x::x) address of the RADIUS server.
● key 0 authentication-key — Enter an authentication key in plain text. A maximum of 42
characters.
● key 9 authentication-key — Enter an authentication key in encrypted format. A maximum of
128 characters.
● authentication-key — Enter an authentication in plain text. A maximum of 42 characters. It is
not necessary to enter 0 before the key.
● auth-port port-number — (Optional) Enter the UDP port number used on the server for
authentication, from 1 to 65535, default 1812.
Default Not configured
Command Mode CONFIGURATION
Usage
Information
The authentication key must match the key configured on the RADIUS server. You cannot enter spaces in
the key. The show running-configuration output displays both unencrypted and encrypted keys
in encrypted format. Configure global settings for the timeout and retransmit attempts allowed on
RADIUS servers using the radius-server retransmit and radius-server timeout
commands.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S).
Also supported in SmartFabric mode starting in release 10.5.0.1.
1034 Security