User's Manual

Table Of Contents
124
Users Manual of CS-6306R
6.2.3 RADIUS Configuration Task List
Configuring Switch to RADIUS Server Communication
Configuring Switch to Use Vendor-Specific RADIUS Attributes
Specifying RADIUS Authentication
Specifying RADIUS Authorization
Specifying RADIUS Accounting
6.2.4 RADIUS Configuration Task
6.2.4.1 Configuring Switch to RADIUS Server Communication
The RADIUS host is normally a multiuser system running RADIUS server software from Livingston, Merit,
Microsoft, or another software provider.
A RADIUS server and a Cisco router use a shared secret text string to encrypt passwords and exchange
responses.
To configure RADIUS to use the AAA security commands, you must specify the host running the RADIUS
server daemon and a secret text (key) string that it shares with the router.
To configure per-server RADIUS server communication, use the following command in global configuration
mode:
Command Purpose
radius-server hostip-address
[auth-portport-number][acct-portportnumber]
Specifies the IP address or host name of the remote
RADIUS server host and assign authentication and
accounting destination port numbers.
radius-server keystring
Specifies the shared secret text string used between
the router and a RADIUS server.
To configure global communication settings between the router and a RADIUS server, use the following
radius-server commands in global configuration mode:
Command Purpose
radius-server retransmitretries
Specifies how many times the switch transmits each
RADIUS request to the server before giving up (the
default is 2).
radius-server timeout seconds
Specifies for how many seconds a switch waits for a
reply to a RADIUS request before retransmitting the
request.
radius-server deadtime minutes
Specifies for how many minutes a RADIUS server that
is not responding to authentication requests is passed
over by requests for RADIUS authentication.