| Command: radius-server |
Configures a switch to interface with a RADIUS server.
radius-server host <A.B.C.D | WORD>
radius-server encapsulation ms-chap-v2
radius-server key [<key>]
radius-server password fallback
radius-server port <1-65535>
radius-server secondary-host <A.B.C.D | WORD>
radius-server timeout <1-60>
default radius-server [encapsulation ms-chap-v2] [host] [key] [password fallback] [port] [secondary-host] [timeout]
no radius-server [encapsulation ms-chap-v2] [host] [key] [password fallback] [secondary-host]
None
Global Configuration
| Parameter | Description |
|---|---|
|
encapsulation ms-chap-v2 | Specifies to enable or disable Microsoft Challenge-Handshake Authentication Protocol version 2 (MS-CHAP-V2). MSCHAP-V2 provides an authenticator controlled password change mechanism also known as the change RADIUS password function. The deafult is disabled. This parameter is available only if the switch runs a secure image. |
|
host <A.B.C.D | WORD> | Specifies an IPv4 or IPv6 address for the primary RADIUS server. |
|
key [<key>] | Specifies the secret authentication and encryption key used for all communications between the Network Access Server (NAS) and the RADIUS server. The key, also referred to as the shared secret, must be the same as the one defined on the server. You are prompted to enter and confirm the key. |
|
password fallback | Enables or disables RADIUS password fallback. The default is disabled. |
|
port <1-65535> | Specifies the UDP port the switch uses to interface with the RADIUS server. The default is 1812. |
|
secondary-host <A.B.C.D | WORD> | Specifies an IPv4 or IPv6 address for a secondary RADIUS server. |
|
timeout <1-60> | Specifies the number of seconds before the switch RADIUS service request times out. RADIUS allows three retries each for the primary and secondary server. The default is 2. |