User Manual

Table Of Contents
[Description]
Sets the reply wait time from the supplicant during port authentication for the applicable interface.
If this command is executed with the "no" syntax, the setting returns to the default.
[Note]
This command can be specified only for both LAN/SFP port and logical interface.
To use this command, you must enable the port authentication function for the applicable interface. (dot1x port-control
command, auth-mac enable command, auth-web enable command)
[Example]
Set the reply wait time from the supplicant of LAN port #1 to 180 seconds.
SWX3220(config)#interface port1.1
SWX3220(config-if)#auth timeout supp-timeout 180
5.3.20 Set RADIUS server host
[Syntax]
radius-server host host [auth-port port] [timeout time] [retransmit count] [key secret]
no radius-server host
[Keyword]
auth-port : Sets the UDP port number used for authenticating the RADIUS server
timeout : Sets the reply standby time for requests sent to the RADIUS server
retransmit : Sets the number of times to resend the request to the RADIUS server
key : Sets the password used for communicating with the RADIUS server
[Parameter]
host : IPv4 address (A.B.C.D) or IPv6 address (X:X::X:X)
When specifying an IPv6 link local address, the transmitting interface also needs to be specified
(fe80::X%vlanN format).
port : <0-65535>
UDP port number used for authentication (the default value of 1812 is used when this is omitted)
time : <1-1000>
Reply standby time (in seconds; the settings for the radius-server timeout command--5 sec. at default
are used if this is omitted)
count : <0-100>
Number of times to resend (the settings for the radius-server retransmit command--3 times. at default
are used if this is omitted)
secret : Single-byte alphanumeric characters, and single-byte symbols other than the characters '?' and spaces
(128 characters or less)
Shared password (the settings for the radius-server key command are used if this is omitted)
[Initial value]
none
[Input mode]
global configuration mode
[Description]
Adds a server to the authentication server list.
The maximum number of entries is 8.
If this command is executed with the "no" syntax, this deletes the specified server from the authentication server list.
[Note]
The setting values should be adjusted so that the value of (setting value of radius-server timeout command) x (setting value of
radius-server retransmit command + 1) x (number of RADIUS servers) is within the setting value of the auth timeout
server-timeout command.
194 | Command Reference | Interface control