191| Authentication Servers AOS-W 6.5.3.x| User Guide
hash Use '#' as delimiter between fields
none NULL
percent Use '%' as delimiter between fields
semicolon Use ';' as delimiter between fields
slash Use '/' as delimiter between fields
space Use ' ' as delimiter between fields
(host) (Radius Modifier Profile "dynamic-mod") #include Aruba-Location-Id dynamic essid1 with
ap-macaddr2 delimiter at ?
To show a RADIUS modifier profile with mixing of static- and dynamic- data
(host) (config) #show aaa radius modifier dynamic-mod
Radius Modifier Profile
-----------------------
Action Attribute Name Data Type Data Value
------ -------------- --------- ----------
+Attr Aruba-Location-Id dynamic essid1 with ap-macaddr2 delimiter at
+Attr BW-Area-Code static "212"
+Attr BW-City-Name static "San Jose"
+Attr Aruba-AP-Group dynamic ap-group1
-Attr Aruba-Device-Type
RADIUS Server Authentication Codes
A configured RADIUS server returns the following standard response codes.
Code Description
0 Authentication OK.
1 Authentication failed :user/password combination not correct.
2 Authentication request timed out :No response from server.
3 Internal authentication error.
4 Bad Response from RADIUS server :verify shared secret is correct.
5 No RADIUS authentication server is configured.
6 Challenge from server. (This does not necessarily indicate an error condition.)
Table 46: RADIUS Authentication Response Codes
RADIUS Server Fully Qualified Domain Names
If you define a RADIUS server using the FQDN of the server rather than its IP address, the switch periodically
generates a DNS request and caches the IP address returned in the DNS response. To view the IP address that
currently correlates to each RADIUS server FQDN, access the command-line interface in config mode and issue
the following command:
(host) #show aaa fqdn-server-names
DNS Query Intervals
If you define a RADIUS server using the FQDN of the server rather than its IP address, the switch periodically
generates a DNS request and caches the IP address returned in the DNS response. DNS requests are sent every
15 minutes by default.
To Next Page
Loading...