User manual

14-49
• pap – Password Authentication Protocol.
• dscp<0-63> – Specifies a DSCP (Differentiated Services Code Point) v to
provide QoS to RADIUS packets. The DSCP value must be between 0-63.
• dynamic-authorization (enable) – Configures support for RADIUS
dynamic authorization extensions (such as Disconnect Message) and
Change-Of-Authorization, as described in RFC 3576.
• enable – Enables support for RADIUS dynamic authorization.
• dynamic-vlan-assignment – Allows users to be assigned to RADIUS
Server specified VLANs, instead of the VLAN mapped to the WLAN.
• enable – Enables dynamic/RADIUS-assigned VLAN assignment.
• mobile-unit timeout<1-60> retransmit<1-10> – Modifies
RADIUS/802.1X supplicant related parameters.
• timeout<1-60> – Time in seconds the switch waits for a response
from the mobile unit before retrying.
• retransmit<1-10> – Number of retries before the switch gives up
and disassociates the mobile unit.
• reauth<30-65535> – Enables periodic reauthentication of all associated
mobile units.
• <30-65535> – Reauthentication period in seconds.
• server [primary|secondary] [ip-address (auth-port) <1024-65535>)
radius-key (0|2|LINE)] – Modifies RADIUS/802.1X server parameters.
• primary – Primary RADIUS server.
• secondary – Secondary RADIUS server.
• ip-address – RADIUS server IP address.
• auth-port<1024-65535> – RADIUS server authentication port
(default:1812).
• radius-key – Radius server shared secret, upto 127 characters.
• 0 – Password is specified UNENCRYPTED.
• 2 – Password is encrypted with password-encryption secret.
• LINE – Radius server shared secret, upto 127 characters.
• server timeout<1-60> retransmit<1-10> – Modify Radius/802.1X server
parameters.
• timeout<1-60> – Time, in seconds, the switch waits for a response
from the radius server before retrying.
• retransmit<1-10> – Number of retries before the switch gives up
and disassociate the mobile unit.