Introduction Configuring a TACACS+ Server
Software Reference for SwitchBlade x3100 Series Switches (Access and Security)
6-82
Example ADD RADIUS SERVER=10.10.10.10 AUTHENTICATION=ON ACCOUNT-
ING=ON
RETRIES Specifies the number of times a user authentication
request should be retried. Once the maximum number
of retries has been reached without a response from the
RADIUS server, the next RADIUS or TACACS+ server
or local database is consulted to determine the validity
of the authentication attempt.
In the case where connectivity is lost with the primary
radius server, some supplicants may timeout before
authentication is passed to the secondary server.
Decreasing the RETRIES or TIMEOUT parameter can
improve the likelihood of authentication succeeding in
these cases.
3
TIMEOUT Used to specify the number of seconds to wait for a
response back from the RADIUS server. If no response
is received within the timeout period either the request
is retried if there are retries remaining, the next
RADIUS or TACACS+ server is contacted or authenti-
cation is attempted against the local user database.
5 seconds
AUTHENTI-
CATION
Whether the specified server will perform authentica-
tion.
OFF
ACCOUNT-
ING
Whether to turn accounting ON or OFF for the speci-
fied server.
OFF
PRIORITY Allows the user to specify the order in which servers
are used. The lower the number, the higher the priority.
If more than one server is set to the same priority, they
are looped through in no specific order. (The order will
follow what appears in the SHOW RADIUS command,
but this could change after a system reboot.)
Since this is a new parameter for 14.2, any existing
radius servers will default to 1 after upgrading.
1
TYPE Specifies whether the RADIUS Server can be used for
port authentication (802.1X), user login authentication
(LOGIN), or both.
Option Description Default Value
To Next Page
Loading...
Need help?
General
