Security
7705 SAR OS System Management Guide Page 119
server
Syntax server index address ip-address secret key [hash | hash2]
no server index
Context config>system>security>radius
Description This command adds a RADIUS server and configures the RADIUS server IP address, index, and key
values.
Up to five RADIUS servers can be configured at any one time. RADIUS servers are accessed in order
from lowest to highest index for authentication requests until a response from a server is received. A
higher-indexed server is only queried if no response is received from a lower-indexed server (which
implies that the server is not available). If a response from a server is received, no other RADIUS
servers are queried. It is assumed that there are multiple identical servers configured as backups and
that the servers do not have redundant data.
The no form of the command removes the server from the configuration.
Default No RADIUS servers are configured.
Parameters index — the index for the RADIUS server. The index determines the sequence in which the servers
are queried for authentication requests. Servers are queried in order from lowest to highest index.
Values 1 to 5
address ip-address — the IP address of the RADIUS server. Two RADIUS servers cannot have the
same IP address. An error message is generated if the server address is a duplicate.
Values ipv4-address a.b.c.d (host bits must be 0)
secret key — the secret key to access the RADIUS server. This secret key must match the password
on the RADIUS server.
Values Up to 20 characters in length
hash — specifies that the key is entered in an encrypted form. If the hash parameter is not used, the
key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in
encrypted form in the configuration file with the hash parameter specified.
hash2 — specifies that the key is entered in a more complex encrypted form. If the hash2 parameter
is not used, the less encrypted hash form is assumed.
To Next Page
Loading...
