CLI Command
Use the following CLI commands to configure the RADIUS client on the switch:
- To enable or disable RADIUS client, (configure)# set radius authentication [{enabled | disabled}]
- To assign the switch to a group, (configure)# set radius authentication group <group>
- To set the user account realm that is authorized to log in to this switch, (configure)# set radius authentication realm <realm>.
- To set the maximum number of Access-Request messages to send if the server does not reply, (configure)# set radius authentication retry-number <retry-number>
- To set the time to wait before attempting to reauthenticate a login, (configure)# set radius authentication retry-number <retry-time-in-seconds>
- To set the primary or secondary RADIUS server, (configure)# set radius authentication server <ip-addr> <shared-secret> [encrypted-type1] [{primary | secondary}]
- To set the IP address used as the source IP address for Access-Request messages, (configure)# set radius authentication source-ip <ip-addr>
- To set whether the switch recognizes only Access-Accept messages that have the correct group name included, (configure)# set radius authentication switch-service-type-required [{enabled | disabled}]
- To set the UDP port number to use for RADIUS authentication, (configure)# set radius authentication udp-port <1812-or-1645>
|
|