CLI Reference Guide

266 CHAPTER 7: CONFIGURING AUTHENTICATION, AUTHORIZATION, AND ACCOUNTING PARAMETERS
When the dead time is set to 0, and there are two or more RADIUS
servers in a RADIUS server group, authentication starts with the first
server in the group, unless there are two or more RADIUS servers and
load sharing is configured, in which case authentication starts by trying a
server in round-robin style.
7 In the Key box, type the password (also known as a shared secret key)
used to authenticate to the RADIUS server.
You must provide the same password that is defined on the RADIUS
server. The password can be 1 to 32 characters long, with no spaces or
tabs.
8 In the Authorization Password box, type the password used for outbound
authentication and authorization to a RADIUS server (1 to 32
alphanumeric characters, with no spaces or tabs). This authorization
password overrides the default authorization password for MAC users.
Providing an authorization password is required only for users whose
devices are authenticated by their MAC addresses or for last-resort users,
neither of which have a regular username or password. For MAC users,
the password is the user’s MAC address, by default. MSS obtains the
MAC address from frames received from the device. For last-resort users,
the password is 3Com.
Changing the password applies both to MAC users and to last-resort
users.
9 To make RADIUS packets from the WX switch use the system IP address
as the source IP address, select Use System IP Address.
10 Do one of the following:
 To define RADIUS servers, go to “Defining RADIUS Servers”.
 Click Finish to save the changes and close the wizard.
Defining RADIUS
Servers
To use RADIUS servers for authentication, authorization, or accounting of
users, you need to define the servers in the network plan.
To define a RADIUS server
1 Access the WX Switch wizard for the WX switch. (See “Accessing the WX
Switch Wizard” on page 187.)
2 Select AAA at the top of the wizard, if not already selected.
3 Select RADIUS Server from the organizer list on the left side of the page,
if not already selected.