6-19
RADIUS Authentication, Authorization, and Accounting
Configuring the Switch for RADIUS Authentication
â– Retransmit attempts: If the first attempt to contact a RADIUS
server fails, specifies how many retries you want the switch to attempt
on that server.
â– Change of Authorization port: The dyn-autz-port parameter
specifies the UDP port number that listens for the Change of Autho-
rization and Disconnect messages. The UDP port range is 1024-49151.
The default port is 3799.
Syntax: aaa authentication num-attempts < 1 - 10 >
Specifies how many tries for entering the correct user-
name and password before shutting down the session
due to input errors. (Default: 3; Range: 1 - 10).
[no] radius-server
key < global-key-string >
Specifies the global encryption key the switch uses with
servers for which the switch does not have a server-
specific key assignment. This key is optional if all
RADIUS server addresses configured in the switch
include a server-specific encryption key. (Default:
Null.)
[encrypted-key <global-key-string >]
Global encryption key, specified using a base64-
encoded aes-256 encrypted string.
dead-time < 1 - 1440 >
Optional. Specifies the time in minutes during which
the switch will not attempt to use a RADIUS server that
has not responded to an earlier authentication attempt.
(Default: 0; Range: 1 - 1440 minutes)
dyn-autz-port <1024-49151>
Specifies the UDP port number that listens for Change
of Authorization or Disconnect messages. The range of
ports is 1024-49151. See Change-of-Authorization on
page 6-49.
Default: 3799
To Next Page
Loading...
Need help?
General
