Authentication Commands
4-87
4
radius-server host
This command specifies primary and backup RADIUS servers and authentication
parameters that apply to each server. Use the no form to restore the default values.
Syntax
[no] radius-server index host {host_ip_address | host_alias}
[auth-port
auth_port | acct-port acct_port] [timeout timeout] [retransmit
retransmit] [key key]
• index - Allows you to specify up to five servers. These servers are queried in
sequence until a server responds or the retransmit period expires.
• host_ip_address - IP address of server.
• host_alias - Symbolic name of server. (Maximum length: 20 characters)
• auth_port - RADIUS server UDP port used for authentication messages.
(Range:
1-65535)
• acct_port - RADIUS server UDP port used for accounting messages.
(Range:
1-65535)
• timeout - Number of seconds the switch waits for a reply before resending
a request. (Range: 0-2147483647)
• retransmit - Number of times the switch will try to authenticate logon access
via the RADIUS server. (Range: 0-2147483647)
• key - Encryption key used to authenticate logon access for client. Do not
use blank spaces in the string. (Maximum length: 20 characters)
Default Setting
• auth-port - 1812
• acct-port - 1813
• timeout - 5 seconds
• retransmit - 2
Command Mode
Global Configuration
Example
Console(config)#radius-server 1 host 192.168.1.20 port 181 timeout 10
retransmit 5 key
green
Console(config)#radius-server 1 host 168.192.1.50 acct-port 100
Console(config)#
Console(config)#radius-server 1 host 168.192.1.50 ?
status The RADIUS service status
auth-port UDP port for RADIUS authentication server (default is 1812)
acct-port UDP port for RADIUS accounting server (default is 1813)
Timeout Sets authentication request interval
retransmit Sets the number of authentication retries
key Sets the RADIUS encryption key
<cr>