Specifications

3-573

Cisco Wide Area Application Services Command Reference

OL-21611-01

Chapter 3 CLI Commands

(config) radius-server

To configure a set of RADIUS authentication server settings on the WAAS device, use the radius-server

global configuration command. To disable RADIUS authentication server settings, use the no form of

this command.

radius-server {host hostname | hostipaddr [primary] | key keyword | retransmit retries |

timeout seconds}

no radius-server {host hostname | hostipaddr [primary] | key keyword | retransmit retries |

timeout seconds}

Syntax Description

Defaults retransmit retries: 2

timeout seconds: 5

Command Modes global configuration

Device Modes application-accelerator

central-manager

Usage Guidelines RADIUS authentication is disabled by default. You can enable RADIUS authentication and other

authentication methods at the same time. You can also specify which method to use first. (See the

(config) authentication configuration command.)

You can configure multiple RADIUS servers; authentication is attempted on the primary server first. If

the primary server is unreachable, then authentication is attempted on the other servers in the RADIUS

farm, in the order in which they were configured. If authentication fails for any reason other than a server

is unreachable, authentication is not attempted on the other servers in the farm. This process applies

regardless of the setting of the authentication fail-over server-unreachable command.

Examples The following example shows how to specify a RADIUS server, specify the RADIUS key, and accept

retransmit defaults. You can verify the configuration using the show radius-server command.

host hostname Specifies a RADIUS server. You can have a maximum of 5 servers.

hostipaddr IP address of the RADIUS server.

primary (Optional) Sets the server as the primary server.

key keyword Specifies the encryption key shared with the RADIUS servers. You can

have a maximum of 15 characters.

retransmit retries Specifies the number of transmission attempts (1–3) to an active server for

a transaction. The default is 2.

timeout seconds Specifies the time to wait for a RADIUS server to reply. The range is from

1 to 20 seconds. The default is 5 seconds.