mac
Commands for RADIUS
473
<string> is the key string. If key option is set as 0, the key is not encrypted
and its range should not exceed 64 characters, if key option is set as 7, the key is
encrypted and its range should not exceed 64 characters;
primary for primary server. Multiple RADIUS sever can be configured and
would be available. RADIUS server will be searched by the configured order if primary is
not configured, otherwise, the specified RADIUS server will be used first.
Command Mode: Global Mode
Default: No RADIUS accounting server is configured by default.
Usage Guide: This command is used to specify the IPv4/IPv6 address and port number
of the specified RADIUS server for switch accounting, multiple command instances can
be configured. The <port-number> parameter is used to specify accounting port number,
which must be the same as the specified accounting port in the RADIUS server; the
default port number is 1813. If this port number is set to 0, accounting port number will be
generated at random and can result in invalid configuration. This command can be used
repeatedly to configure multiple RADIUS servers communicating with the switch, the
switch will send accounting packets to all the configured accounting servers, and all the
accounting servers can be backup servers for each other. If primary is specified, then
the specified RADIUS server will be the primary server. It only configures a RADIUS
primary server whether the server use IPv4 address or IPv6 address.
Example: Sets the RADIUS accounting server of IPv6 address to 2004:1:2:3::2, as the
primary server, with the accounting port number as 3000.
Switch(config)#radius-server accounting host 2004:1:2:3::2 port 3000 primary
43.12 radius-server authentication host
Command: radius-server authentication host {<ipv4-address> | <ipv6-address>}
[port <port-number>] [key {0 | 7} <string>] [primary] [access-mode {dot1x | telnet}]
no radius-server authentication host {<ipv4-address> |
<ipv6-address>}
Function: Specifies the IPv4 address or IPv6 address and listening port number, cipher
key, whether be primary server or not and access mode for the RADIUS server; the no
command deletes the RADIUS authentication server.
Parameters: <ipv4-address> | <ipv6-address> stands for the server IPv4/IPv6
address;
<port-number> for listening port number, from 0 to 65535, where 0 stands
for non-authentication server usage;
<string> is the key string. If key option is set as 0, the key is not encrypted
and its range should not exceed 64 characters, if key option is set as 7, the key is










