Service Manual

Version Description
8.3.11.1 Introduced on the Z9000.
8.4.1.0 Added support for IPv6.
8.3.7.0 Introduced on the S4810.
7.7.1.0 Authentication key length increased to 42 characters.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series.
pre-6.2.1.0 Introduced on the E-Series.
Usage Information
To congure any number of RADIUS server hosts for each server host that is congured, use this command.
Dell Networking OS searches for the RADIUS hosts in the order they are congured in the software.
The global default values for the timeout, retransmit, and key optional parameters are applied, unless
those values are specied in the radius-server host or other commands. To return to the global
default values, if you congure the
timeout, retransmit, or key values, include those keywords when
using the no radius-server host command syntax.
You can use duplicate host names or IP addresses among RADIUS groups. However, you cannot use
duplicate host names or IP addresses within the same RADIUS group. If a VRF is not congured on the
RADIUS group, then servers congured in the group are considered to be on the default VRF. RADIUS
servers that are congured in the CONFIGURATION mode are also considered to be on the default VRF.
You must congure the RADIUS group explicitly with the aaa radius group command in order for the
AAA servers to use the group of RADIUS servers. The 802.1x servers use the group of RADIUS servers
based on the VRF where the 802.1x request is received. As a result, it is possible that both globally
congured RADIUS servers as well as the group-congured RADIUS servers (without VRF or default VRF)
are used for processing the 802.1x requests that are received at the default VRF. The order in which the
RADIUS servers are tried depends on the order in which the RADIUS servers are congured.
Example
Dell(conf)#radius-server group group1
Dell(conf-radius-group)#radius-server host 1.1.1.1 key secret
Dell(conf-radius-group)#no radius-server host 1.1.1.1
Related Commands
login authentication — sets the database to be checked when a user logs in.
radius-server key — sets an authentication key for RADIUS communications.
radius-server retransmit — sets the number of times the RADIUS server attempts to send information.
radius-server timeout — sets the time interval before the RADIUS server times out.
radius-server vrf
Create an association between a RADIUS server group and a VRF and source interface.
ud
Syntax
radius-server vrf vrf-name [source-interface interface]
To delete the association between a RADIUS server group and a VRF and source interface, use the no
radius-server vrf vrf-name [source-interface interface] command.
Security
1285