Security
7450 ESS System Mangement Guide Page 181
Context config>system>security>radius
Description This command adds a RADIUS server and configures the RADIUS server IP address, index, and key
values.
Up to five RADIUS servers can be configured at any one time. RADIUS servers are accessed in order
from lowest to highest index for authentication requests until a response from a server is received. A
higher indexed server is only queried if no response is received from a lower indexed server (which
implies that the server is not available). If a response from a server is received, no other RADIUS
servers are queried. It is assumed that there are multiple identical servers configured as backups and
that the servers do not have redundant data.
The no form of the command removes the server from the configuration.
Default No RADIUS servers are configured.
Parameters index — The index for the RADIUS server. The index determines the sequence in which the servers
are queried for authentication requests. Servers are queried in order from lowest to highest index.
Values 1 — 5
address ip-address — The IP address of the RADIUS server. Two RADIUS servers cannot have the
same IP address. An error message is generated if the server address is a duplicate.
Values ipv4-address a.b.c.d (host bits must be 0)
ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces)
x:x:x:x:x:x:d.d.d.d
x: [0..FFFF]H
d: [0..255]D
secret key — The secret key to access the RADIUS server. This secret key must match the password
on the RADIUS server.
Values Up to 128 characters in length.
hash — Specifies the key is entered in an encrypted form. If the hash parameter is not used, the key
is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted
form in the configuration file with the hash parameter specified.
hash2 — Specifies the key is entered in a more complex encrypted form. If the hash2 parameter is
not used, the less encrypted hash form is assumed.
To Next Page
Loading...
