Reference Guide

Usage
Information
● To remove the configured max-retry or lockout-period settings, enter the no password-
attributes {max-retry | lockout-period} command.
● When a user is locked out due to exceeding the maximum number of failed login attempts, other users
can still access the switch.
Example
OS10(config)# password-attributes max-retry 5 lockout-period 30
Supported
Releases
10.4.1.0 or later
radius-server host
Configures a RADIUS server and the key used to authenticate the switch on the server.
Syntax
radius-server host {hostname | ip-address} key {0 authentication-key | 9
authentication-key | authentication-key} [auth-port port-number]
Parameters
● hostname — Enter the host name of the RADIUS server.
● ip-address — Enter the IPv4 (A.B.C.D) or IPv6 (x:x:x:x::x) address of the RADIUS server.
● key 0 authentication-key — Enter an authentication key in plain text (up to 42 characters).
● key 9 authentication-key — Enter an authentication key in encrypted format (up to 128
characters).
● authentication-key — Enter an authentication in plain text (up to 42 characters). It is not
necessary to enter 0 before the key.
● auth-port port-number — (Optional) Enter the UDP port number used on the server for
authentication (0 to 65535, default 1812)
Default Not configured
Command Mode CONFIGURATION
Usage
Information
The authentication key must match the key configured on the RADIUS server. You cannot enter spaces
in the key. The show running-configuration output displays both unencrypted and encrypted
keys in encrypted format. Configure global settings for the timeout and retransmit attempts allowed
on RADIUS servers by using the radius-server retransmit and radius-server timeout
commands. The no version of this command removes a RADIUS server configuration.
Example
OS10(config)# radius-server host 1.5.6.4 key secret1
Supported
Releases
10.2.0E or later
radius-server retransmit
Configures the number of authentication attempts allowed on RADIUS servers.
Syntax
radius-server retransmit retries
Parameters retries — Enter the number of retry attempts (0 to 100).
Default An OS10 switch retransmits a RADIUS authentication request three times.
Command Mode CONFIGURATION
Usage
Information
Use this command to globally configure the number of retransmit attempts allowed for authentication
requests on RADIUS servers. The no version of this command resets the value to the default.
Example
OS10(config)# radius-server retransmit 50
Supported
Releases
10.2.0E or later
508 System management