PurposeCommand or Action
The test username username option enables automated testing of the RADIUS
server connection. The specified username does not need to be a valid user name.
Example:
Switch(config)# radius-server
The key option specifies an authentication and encryption key to use between the
switch and the RADIUS server.
host 172.l20.39.46 test username
user1
To use multiple RADIUS servers, reenter this command for each server.
Configures the authorization and encryption key used between the switch and the
RADIUS daemon running on the RADIUS server.
radius-server key string
Example:
Switch(config)# radius-server key
Step 4
rad123
Specifies the number of unanswered sent messages to a RADIUS server before
considering the server to be inactive. The range of num-tries is 1 to 100.
radius-server dead-criteria tries
num-tries
Step 5
Example:
Switch(config)# radius-server
When you configure the RADIUS server parameters:
•
Specify the key string on a separate command line.
•
For key string, specify the authentication and encryption key used between
the switch and the RADIUS daemon running on the RADIUS server. The
dead-criteria tries 30
key is a text string that must match the encryption key used on the RADIUS
server.
•
When you specify the key string, use spaces within and at the end of the
key. If you use spaces in the key, do not enclose the key in quotation marks
unless the quotation marks are part of the key. This key must match the
encryption used on the RADIUS daemon.
•
You can globally configure the timeout, retransmission, and encryption key
values for all RADIUS servers by using with the radius-server host global
configuration command. If you want to configure these options on a per-server
basis, use the radius-server timeout, radius-server transmit, and the
radius-server key global configuration commands. For more information,
see the Cisco IOS Security Configuration Guide, Release 12.4 and the Cisco
IOS Security Command Reference, Release 12.4.
You need to configure some settings on the RADIUS server,
including: the switch IP address, the key string to be shared by both
the server and the switch, and the downloadable ACL (DACL). For
more information, see the RADIUS server documentation.
Note
Returns to privileged EXEC mode.end
Example:
Switch(config)# end
Step 6
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
316 OL-29434-01
Configuring Web-Based Authentication
Configuring Switch-to-RADIUS-Server Communication