User's Manual

Fortress ES-Series CLI Guide: Network Security, Authentication and Auditing
144
server on the priority list (MaxRetries). You can configure 1 to
10 maximum connection attempts; the default is 3.
You can determine whether a server is
active or inactive
(
AdminState). Configured servers are active by default.
Optionally, you can add a descriptive string of up to 32
characters for the server. If you want to include spaces in the
Description, enclose it in quotation marks.
Alternatively, you can add authentication servers to the Mesh
Point configuration using valid Mesh Point CLI switches with
the
add auth command:
# add auth -name <serverName> -type fortressRadius|thirdParty -atype 8021x|admin|userdev
-prio 0–999 -ip
<serverIPaddr> -port <port#> -key <sharedKey> -maxretry 1–10
-admin active|inactive -desc
<description|“descriptive string”>
When authentication servers have been configured for the
Mesh Point, you can view all of the settings for each server by
using the -
detail switch with show auth:
> show auth -detail
Name: Local
Priority: 1
Mode: local
Type: fortressRadius
AuthType: USER_DEVICE|ADMIN
IPaddr: 127.0.0.1
PortNumber: 1812
MaxRetries: 3
Description:
AdminState: active
Once an authentication server has been configured on the
Mesh Point, you cannot change its name. Use the
-name
switch with the
update command to reconfigure the server you
specify.
# update auth -name <serverName> -type fortressRadius|thirdParty -atype 8021x|admin|userdev
-prio 0–999 -ip
<serverIPaddr> -port <port#> -key <sharedKey> -maxretry 1–10
-admin active|inactive -desc
<description|“descriptive string”>
You can delete a specified authentication server or all
configured authentication servers with the
del command. If
you enter
del auth by itself, the CLI will prompt you for the
server’s name or permit you to enter
all interactively.
# del auth -all|-name <serverName>
You must be logged on to an administrator -level account to
change configuration settings (refer to Section 2.2).