Users Guide
Example
DellEMC(conf)# radius-server group group1
DellEMC(conf-radius-group)# radius-server host 1.1.1.1 key secret
DellEMC(conf-radius-group)# radius-server host 2.2.2.2 key secret
DellEMC(conf-radius-group)# radius-server vrf vrf1 source-interface
tengigabitethernet 1/3/1
DellEMC(conf-radius-group)# show config
!
radius-server group group1
radius-server vrf vrf1 source-interface TenGigabitEthernet 1/3/1
radius-server host 1.1.1.1 key 7 9a2f3ec0c65c6f41
radius-server host 2.2.2.2 key 7 9a2f3ec0c65c6f41
DellEMC(conf-radius-group)#
Related
Commands
● login authentication — sets the database to be checked when a user logs in.
● radius-server key — sets an authentication key for RADIUS communications.
● radius-server retransmit — sets the number of times the RADIUS server attempts to send
information.
● radius-server timeout — sets the time interval before the RADIUS server times out.
radius-server host
Configure a RADIUS server host.
Syntax
radius-server host {hostname | ipv4-address | ipv6-address} [auth-port
port-number] [acct-port port-number] [retransmit retries] [timeout seconds]
[key [encryption-type] key]
Parameters
hostname
Enter the name of the RADIUS server host.
ipv4-address
|
ipv6-address
Enter the IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X) of the RADIUS
server host.
auth-port
port-
number
(OPTIONAL) Enter the keywords auth-port then a number as the port number.
The range is from zero (0) to 65535. The default port-number is 1812.
acct-port
port-
number
(OPTIONAL) Enter the keywords acct-port then a number as the port number.
The range is from 1 to 65535. The default port-number is 1813.
retransmit
retries
(OPTIONAL) Enter the keyword retransmit then a number as the number of
attempts. This parameter overwrites the radius-server retransmit
command. The range is from zero (0) to 100. The default is 3 attempts.
timeout
seconds
(OPTIONAL) Enter the keyword timeout then the seconds the time interval the
switch waits for a reply from the RADIUS server. This parameter overwrites the
radius-server timeout command. The range is from 0 to 1000. The default is
5 seconds.
key [
encryption-
type
]
key
(OPTIONAL) Enter the keyword key then an optional encryption-type and a string
up to 42 characters long as the authentication key. The RADIUS host server uses
this authentication key and the RADIUS daemon operating on this switch.
For the encryption-type, enter either zero (0) or 7 as the encryption type for the
key entered. The options are:
● 0 is the default and means the password is not encrypted and stored as clear
text.
● 7 means that the password is encrypted and hidden.
Configure this parameter last because leading spaces are ignored.
Defaults Not configured.
Command Modes
● RADIUS SERVER GROUP
● CONFIGURATION
Security 1383