Connectivity Guide

RADIUS authentication
To congure a RADIUS server for authentication, enter the server's IP address or host name, and the key used to authenticate the OS10
switch on a RADIUS host. You can enter the authentication key in plain text or encrypted format. You can change the user datagram
protocol (UDP) port number on the server.
• Congure a RADIUS authentication server in CONFIGURATION mode. By default, a RADIUS server uses UDP port 1812.
radius-server host {hostname | ip-address} key {0 authentication-key | 9 authentication-key
| authentication-key} [auth-port port-number]
Re-enter the radius-server host command multiple times to congure more than one RADIUS server. If you congure multiple
RADIUS servers, OS10 attempts to connect in the order you congured them. An OS10 switch connects with the congured RADIUS
servers one at a time, until a RADIUS server responds with an accept or reject response. The switch tries to connect with a server for the
congured number of retransmit retries and timeout period.
Congure global settings for the timeout and retransmit attempts allowed on RADIUS servers using the radius-server retransmit,
radius-server timeout, and ip radius source-interfacecommands. By default, OS10 supports three RADIUS
authentication attempts and times out after ve seconds. No source interface is congured.
• Congure the number of times OS10 retransmits a RADIUS authentication request in CONFIGURATION mode, from 0 to 100 retries;
default 3.
radius-server retransmit retries
• Congure the timeout period used to wait for an authentication response from a RADIUS server in CONFIGURATION mode, from 0 to
1000 seconds; default 5.
radius-server timeout seconds
• (Optional) Congure an arbitrary IP address as the source interface used in RADIUS connections in CONFIGURATION mode. The IP
address of the specied interface is included in the IP header of RADIUS packets without changing the source IP address. The ip
radius source-interface
command is optional for RADIUS-based user authentication. RADIUS authentication is still performed
if you do not specify an IP RADIUS source interface.
ip radius source-interface interface
Congure RADIUS server
OS10(config)# radius-server host 1.2.4.5
OS10(config)# radius-server retransmit 10
OS10(config)# radius-server timeout 10
OS10(config)# ip radius source-interface mgmt 1/1/1
View RADIUS server conguration
OS10# show running-configuration
...
radius-server host 1.2.4.5 key 9
3a95c26b2a5b96a6b80036839f296babe03560f4b0b7220d6454b3e71bdfc59b
radius-server retransmit 10
radius-server timeout 10
ip radius source-interface mgmt 1/1/1
...
Delete RADIUS server
OS10# no radius server host 1.2.4.5
616
System management