Switch User Manual

set radius
SecureStack C3 Configuration Guide 26-7
Defaults
Ifnoparametersarespecified,allRADIUSconfigurationinformationwillbedisplayed.
Mode
Switchcommand,read‐only.
Example
ThisexampleshowshowtodisplayRADIUSconfigurationinformation:
C3(rw)->show radius
RADIUS status: Enabled
RADIUS retries: 3
RADIUS timeout: 20 seconds
RADIUS Server IP Address Auth-Port Realm-Type
-------------- ---------- --------- -----------------
10 172.16.20.10 1812 management-access
Table 26‐1providesanexplanationofthecommandoutput.
set radius
Usethiscommandtoenable,disable,orconfigureRADIUSauthentication.
Syntax
set radius {enable | disable} | {retries number-of-retries} | {timeout timeout} |
{server index ip-address port [secret-value] [realm {management-access | any |
network-access}} | {realm {management-access | any | network-access} {index| all}}
server(Optional)DisplaysRADIUSserverconfigurationinformation.
index|all Forusewiththeserverparametertoshowserverconfigurationforall
serversoraspecificRADIUSserverasdefinedbyanindex.
Table 26-1 show radius Output Details
Output Field What It Displays...
RADIUS status Whether RADIUS is enabled or disabled.
RADIUS retries Number of retry attempts before the RADIUS server times out. The default value of 3
can be reset using the set radius command as described in “set radius” on
page 26-7.
RADIUS timeout Maximum amount of time (in seconds) to establish contact with the RADIUS server
before retry attempts begin. The default value of 20 can be reset using the set
radius command as described in “set radius” on page 26-7.
RADIUS Server RADIUS server’s index number, IP address, and UDP authentication port.
Realm-Type Realm defines who has to go through the RADIUS server for authentication.
• Management-access: This means that anyone trying to access the switch (Telnet,
SSH, Local Management) has to authenticate through the RADIUS server.
• Network-access: This means that all the users have to authenticate to a RADIUS
server before they are allowed access to the network.
• Any-access: Means that both Management-access and Network-access have
been enabled.