Specifications

set radius
21-6 Security Configuration
set radius
Usethiscommandtoenable,disable,orconfigureRADIUSauthentication.
Syntax
set radius {enable | disable} | {retries number-of-retries} | {timeout timeout} |
{server index ip-address port [secret-value] [realm {management-access | any |
network-access}} | {realm {management-access | any | network-access} {index| all}}
Parameters
Defaults
Ifsecret‐valueisnotspecified,nonewillbeapplied.
Realm-Type Realm defines who has to go through the RADIUS server for authentication.
• Management-access: This means that anyone trying to access the switch (Telnet,
SSH, Local Management) has to authenticate through the RADIUS server.
• Network-access: This means that all the users have to authenticate to a RADIUS
server before they are allowed access to the network.
• Any-access: Means that both Management-access and Network-access have
been enabled.
Table 21-1 show radius Output Details (Continued)
Output What It Displays...
enable|disable EnablesordisablestheRADIUSclient.
retriesnumber‐of‐
retries
SpecifiesthenumberofretryattemptsbeforetheRADIUSservertimesout.
Validvaluesare from1to10.Defaultis3.
timeouttimeout Specifiesthemaximumamountoftime(inseconds)toestablishcontact
withtheRADIUSserver
beforeretryattemptsbegin.Validvaluesarefrom1
to30.Defaultis20seconds.
serverindex
ip_addressport
Specifiestheindexnumber,IPaddressandtheUDPauthenticationportfor
theRADIUSserver.
secret‐value (Optional)Specifiesanencryptionkeytobeusedforauthentication
betweentheRADIUSclientand
server.
realm
management‐
access|any|
network‐access
RealmallowsyoutodefinewhohastogothroughtheRADIUSserverfor
authentication.
• management‐access:Thismeansthatanyonetryingtoaccesstheswitch
(Telnet,SSH,LocalManagement)hastoauthenticatethroughthe
RADIUSserver.
• network‐access:Thismeans
thatalltheusershavetoauthenticatetoa
RADIUSserverbeforetheyareallowedaccesstothenetwork.
• any:Meansthatbothmanagement‐accessandnetwork‐accesshave
beenenabled.
Note: If the management-access or any access realm has been configured, the
local “admin” account is disabled for access to the switch using the console, Telnet,
or Local Management. Only the network-access realm allows access to the local
“admin” account.
index|all Appliestherealmsettingtoaspecificserverortoallservers.