Specifications

AAA-POLICY 8 - 9
• authentication protocol [chap|pap]
• authentication server <1-6> dscp <0-63>
• authentication server <1-6> host <IP/HOSTNAME> secret [0 <SECRET>|2 <SECRET>|
<SECRET>] {port <1-65535>}
• authentication server <1-6> nac
• accounting server <1-6> nai-routing realm-type [prefix|suffix] realm <REALMNAME>
{strip}
protocol [chap|pap] Configures the protocol used for non-EAP authentication
• chap – Uses Challenge Handshake Authentication Protocol (CHAP)
• pap – Uses Password Authentication Protocol (PAP)
server <1-6> Configures a RADIUS authentication server. Up to 6 RADIUS servers can be configured
• <1-6> – Specify the RADIUS server index from 1 - 6.
dscp <0-63> Configures the Differentiated Service Code Point (DSCP) quality of service parameter
generated in RADIUS packets. The DSCP value specifies the class of service provided to
a packet.
server <1-6> Configures a RADIUS authentication server. Up to 6 RADIUS servers can be configured
• <1-6> – Specify the RADIUS server index from 1 - 6.
host <IP/HOSTNAME> Sets the RADIUS server’s IP address or hostname
secret [0 <SECRET>|
2 <SECRET>|<SECRET>]
Configures the RADIUS server secret. This key is used to authenticate with the RADIUS
server
• 0 <SECRET> – Configures a clear text secret
• 2 <SECRET> – Configures an encrypted secret
• <SECRET> – Specify the secret key. The shared key should not exceed 127 characters.
port <1-65535> Optional. Specifies the RADIUS server port (this port is used to connect to the RADIUS
server)
• <1-65535> – Specify a value from 1 - 65535.
server <1-6> Configures a RADIUS authentication server. Up to 6 RADIUS servers can be configured
• <1-6> – Specifies the RADIUS server index from 1 - 6.
nac Configures the RADIUS authentication server <1-6> used as a Network Access Control
(NAC) server for devices requiring NAC
server <1-6> Configures a RADIUS authentication server. Up to 6 RADIUS servers can be configured
• <1-6> – Specifies the RADIUS server index from 1 - 6.
nai-routing Configures Network Access Identifier (NAI) RADIUS authentication
realm-type [prefix|suffix] Configures the realm-type used for NAI authentication
• prefix – Sets the realm prefix. For example, in the realm name ‘AC\JohnTalbot’, the
prefix is ‘AC’ and the user name ‘JohnTalbot’.
• suffix – Sets the realm suffix. For example, in the realm name ‘[e-mail]’ the
suffix is ‘AC.org’ and the user name is ‘JohnTalbot’.