mac

Commands for RADIUS
475
Usage Guide: This command specifies the time to wait for the RADIUS server to
recover from inaccessible to accessible. When the switch acknowledges a server to be
inaccessible, it marks that server as having invalid status, after the interval specified by
this command; the system resets the status for that server to valid.
Example: Setting the down-restore time for RADIUS server to 3 minutes.
Switch(config)#radius-server dead-time 3
43.14 radius-server key
Command: radius-server key {0 | 7} <string>
no radius-server key
Function: Specifies the key for the RADIUS server (authentication and accounting); the
“no radius-server key” command deletes the key for RADIUS server.
Parameters: <string> is a key string for RADIUS server, If key option is set as 0, the key
is not encrypted and its range should not exceed 64 characters, if key option is set as 7,
the key is encrypted and its range should not exceed 64 characters.
Command mode: Global Mode
Usage Guide: The key is used in the encrypted communication between the switch and
the specified RADIUS server. The key set must be the same as the RADIUS server set,
otherwise, proper RADIUS authentication and accounting will not perform properly.
Example: Setting the RADIUS authentication key to be “test”.
Switch(config)#radius-server key 0 test
43.15 radius-server retransmit
Command: radius-server retransmit <retries>
no radius-server retransmit
Function: Configures the re-transmission times for RADIUS authentication packets; the
no radius-server retransmit” command restores the default setting.
Parameters: <retries> is a retransmission times for RADIUS server, the valid range is 0
to 100.
Command mode: Global Mode
Default: The default value is 3 times.
Usage Guide: This command specifies the retransmission time for a packet without a
RADIUS server response after the switch sends the packet to the RADIUS server. If
authentication information is missing from the authentication server, AAA authentication
request will need to be re-transmitted to the authentication server. If AAA request