User Manual

[Input mode]
RADIUS configuration mode
[Description]
Adds a RADIUS client (NAS) to the RADIUS client list.
The maximum number of registered entries is 100.
If this command is executed with the "no" syntax, the specified RADIUS client setting is deleted.
[Note]
RADIUS client (NAS) information configured using this command will not display in running-config or startup-config.
Also, this is different from the regular settings command, in that it will be saved as setting data when this command is executed.
Information for the RADIUS client (NAS) that was set can be checked using the show radius-server local nas command.
The following settings must be made when specifying a local RADIUS server using the port authentication function of this
device.
SWR2311P(config)#radius-server host 127.0.0.1 key secret_local
[Example]
Add the RADIUS client (NAS) at IP address 192.168.100.101, with a shared password of "abcde”.
SWR2311P(config)#radius-server local-profile
SWR2311P(config-radius)#nas 192.168.100.101 key abcde
10.1.7 Authenticated user settings
[Syntax]
user userid password [vlan vlan-id] [mac mac-address] [ssid ssid] [name name] [mail mail-address]
[auth type] [expire date]
no user userid
[Keyword]
vlan : Set the VLAN for dynamic VLAN
mac : Specify the terminal’s MAC address when you want to specify an authentication terminal
ssid : Specify the SSID when you want to specify a connected SSID
name : Specify the user name
mail : Set the e-mail addresses to which client certificates will be distributed
auth : Set the authentication method type
expire : Set the term of validity for the client certificate (this is enabled only when the authentication method
is EAP-TLS)
[Parameter]
userid : User ID
(within 3–32 characters; cannot specify “DEFAULT”)
Authentication method Characters that can be inputted
EAP-MD5, EAP-TTLS, PEAP, PAP
Single-byte alphanumeric characters and
symbols other than the characters \ [ ] " ? and
spaces
EAP-TLS
Single-byte alphanumeric characters and
symbols other than the characters \ [ ] " ? and
spaces
password : Password
(32 characters or less, single-byte alphanumeric characters and symbols other than the characters \ [ ]
" ? and spaces )
vlan-id : <1-4094>
VLAN number for dynamic VLAN
Command Reference | Application | 285