User Manual

If this command is executed with the "no" syntax, the specified route certificate authority is deleted.
[Note]
If a route certificate authority has not been generated, the functions of the local RADIUS server cannot be used.
When setting a different route certificate authority name when a route certificate authority has already been generated, the route
certificate authority will be overwritten.
When the route certificate authority is deleted or overwritten, all client certificates already issued will become invalid.
Even if a route certificate authority exists, it cannot be used as such unless the crypto pki generate ca settings have not been
made.
[Example]
This generates a route certificate authority with the name “MY RADIUS”.
SWX3220(config)#crypto pki generate ca MYRADIUS
10.4.4 RADIUS configuration mode
[Syntax]
radius-server local-profile
[Input mode]
global configuration mode
[Description]
Switches to the RADIUS configuration mode.
This mode is used to configure the operating specifications for the local RADIUS server function.
[Example]
Switches to the RADIUS configuration mode.
SWX3220(config)#radius-server local-profile
SWX3220(config-radius)#
10.4.5 Authentication method settings
[Syntax]
authentication mode [mode...]
no authentication
[Parameter]
mode : Authentication method
Setting value Description
pap PAP authentication method
peap PEAP authentication method
eap-md5 EAP-MD5 authentication method
eap-tls EAP-TLS authentication method
eap-ttls EAP-TTLS authentication method
[Initial value]
authentication pap peap eap-md5 eap-tls eap-ttls
[Input mode]
RADIUS configuration mode
[Description]
Specifies the authentication method used for the local RADIUS server.
If this command is executed with the "no" syntax, the setting is returned to its default, and all authentication methods will be
enabled.
[Note]
As an internal authentication method for PEAP and EAP-TTLS, this supports MSCHAPv2 and MD5.
Command Reference | Application | 465