User guide

Authenticating Users
Summit24e3 Switch Installation and User Guide 57
Table 15: RADIUS Commands
Command Description
config radius [primary | secondary] server
[<ipaddress> | <hostname>] {<udp_port>} client-ip
<ipaddress>
Configures the primary and secondary
RADIUS server. Specify the following:
• [primary | secondary] —
Configure either the primary or
secondary RADIUS server.
• [<ipaddress> | <hostname>] —
The IP address or hostname of the
server being configured.
• <udp_port> — The UDP port to use
to contact the RADUIS server. The
default UDP port setting is 1645.
• client-ip <ipaddress> — The IP
address used by the switch to identify
itself when communicating with the
RADIUS server.
The RADIUS server defined by this
command is used for user name
authentication and CLI command
authentication.
config radius [primary | secondary] shared-secret
{encrypted} <string>
Configures the authentication string used
to communicate with the RADIUS server.
config radius-accounting [primary | secondary]
server [<ipaddress> | <hostname>] {<udp_port>}
client-ip <ipaddress>
Configures the RADIUS accounting server.
Specify the following:
• [primary | secondary] —
Configure either the primary or
secondary RADIUS server.
• [<ipadress> | <hostname>] —
The IP address or hostname of the
server being configured.
• <udp_port> — The UDP port to use
to contact the RADUIS server. The
default UDP port setting is 1646.
• client-ip <ipaddress> — The IP
address used by the switch to identify
itself when communicating with the
RADIUS server.
The accounting server and the RADIUS
authentication server can be the same.
config radius-accounting [primary | secondary]
shared-secret {encrypted} <string>
Configures the authentication string used
to communicate with the RADIUS
accounting server.
disable radius Disables the RADIUS client.
disable radius-accounting Disables RADIUS accounting.
enable radius Enables the RADIUS client. When
enabled, all CLI logins are sent to the
RADIUS servers for authentication. When
used with a RADIUS server that supports
ExtremeWare CLI authorization, each CLI
command is sent to the RADIUS server for
authentication before it is executed.