White Papers

Version Description
pre-6.2.1.0 Introduced on the E-Series.
Usage
Information
To configure any number of RADIUS server hosts for each server host that is configured, use this
command. Dell EMC Networking OS searches for the RADIUS hosts in the order they are configured in
the software.
The global default values for the timeout, retransmit, and key optional parameters are applied,
unless those values are specified in the radius-server host or other commands. To return to
the global default values, if you configure the timeout, retransmit, or key values, include those
keywords when using the no radius-server host command syntax.
You can use duplicate host names or IP addresses among RADIUS groups. However, you cannot use
duplicate host names or IP addresses within the same RADIUS group. If a VRF is not configured on the
RADIUS group, then servers configured in the group are considered to be on the default VRF. RADIUS
servers that are configured in the CONFIGURATION mode are also considered to be on the default VRF.
You must configure the RADIUS group explicitly with the aaa radius group command in order for the
AAA servers to use the group of RADIUS servers. The 802.1x servers use the group of RADIUS servers
based on the VRF where the 802.1x request is received. As a result, it is possible that both globally
configured RADIUS servers as well as the group-configured RADIUS servers (without VRF or default
VRF) are used for processing the 802.1x requests that are received at the default VRF. The order in
which the RADIUS servers are tried depends on the order in which the RADIUS servers are configured.
Example
DellEMC(config)#radius-server host 192.100.0.12
Force all logged-in users to re-authenticate (y/n)?
DellEMC(config)#no radius-server host 192.100.0.12
Force all logged-in users to re-authenticate (y/n)?
Related
Commands
● login authentication — sets the database to be checked when a user logs in.
● radius-server key — sets an authentication key for RADIUS communications.
● radius-server retransmit — sets the number of times the RADIUS server attempts to send
information.
● radius-server timeout — sets the time interval before the RADIUS server times out.
radius-server key
Configure a key for all RADIUS communications between the switch and the RADIUS host server.
Syntax
radius-server key [encryption-type] key
To delete a password, use the no radius-server key command.
Parameters
encryption-type (OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered.
The options are:
● 0 is the default and means the key is not encrypted and stored as clear text.
● 7 means that the key is encrypted and hidden.
key Enter a string that is the key to be exchanged between the switch and RADIUS
servers. It can be up to 96 characters long.
Defaults Not configured.
Command Modes CONFIGURATION
Command
History
This guide is platform-specific. For command information about other platforms, see the relevant Dell
EMC Networking OS Command Line Reference Guide.
Version Description
9.13(0.0) Changed the maximum length of the password from 32 to 96.
1418 Security