User Manual

Setting value Description
pap PAP authentication method
peap PEAP authentication method
eap-md5 EAP-MD5 authentication method
eap-tls EAP-TLS authentication method
eap-ttls EAP-TTLS authentication method
[Initial value]
authentication pap peap eap-md5 eap-tls eap-ttls
[Input mode]
RADIUS configuration mode
[Description]
Specifies the authentication method used for the local RADIUS server.
If this command is executed with the "no" syntax, the setting is returned to its default, and all authentication methods will be
enabled.
[Note]
As an internal authentication method for PEAP and EAP-TTLS, this supports MSCHAPv2 and MD5.
The authentication method must be set to “eap-md5” when using MD5.
[Example]
This restricts the authentication method to PEAP and EAP-MD5.
SWR2311P(config)#radius-server local-profile
SWR2311P(config-radius)#authentication peap eap-md5
10.1.6 RADIUS client (NAS) settings
[Syntax]
nas host key secret
no nas host
[Keyword]
key : Sets the password used for communicating with the RADIUS client (NAS)
[Parameter]
host : IP address, or IP network address
Setting value Description
IPv4 address (A.B.C.D)
Range from 0.0.0.1 to 223.255.255.255, except
for 127.0.0.1
IPv4 network address (A.B.C.D/M)
The network mask range is from 8 to 32, and the
IP address host part will be “0”
IPv6 address (A:B:C::D)
Out of all unicast addresses, the exceptions are
unspecified addresses (::/128), default root
addresses (::/0) and loopback addresses (::1/128)
IPv6 network address (A:B:C::D/M) The prefix length is 1–128
secret : Shared password
(64 characters or less, single-byte alphanumeric characters and symbols other than the characters \ [ ]
" ? and spaces)
[Initial value]
nas 127.0.0.1 key secret_local
284 | Command Reference | Application