set radius
SecureStack B3 Configuration Guide 20-5
set radius
Usethiscommandtoenable,disable,orconfigureRADIUSauthentication.
Syntax
set radius {enable | disable} | {retries number-of-retries} | {timeout timeout} |
{server index ip-address port [secret-value] [realm {management-access | any |
network-access}} | {realm {management-access | any | network-access} {index| all}}
Parameters
RADIUS timeout Maximum amount of time (in seconds) to establish contact with the RADIUS server
before retry attempts begin. The default value of 20 can be reset using the set
radius command as described in “set radius” on page 20-5.
RADIUS Server RADIUS server’s index number, IP address, and UDP authentication port.
Realm-Type Realm defines who has to go through the RADIUS server for authentication.
• Management-access: This means that anyone trying to access the switch
(Telnet, SSH, Local Management) has to authenticate through the RADIUS
server.
• Network-access: This means that all the users have to authenticate to a RADIUS
server before they are allowed access to the network.
• Any-access: Means that both Management-access and Network-access have
been enabled.
Table 20-1 show radius Output Details (Continued)
Output What It Displays...
enable|disable EnablesordisablestheRADIUSclient.
retriesnumber‐of‐
retries
SpecifiesthenumberofretryattemptsbeforetheRADIUSservertimesout.
Validvaluesarefrom0to10.Defaultis3.
timeouttimeout Specifiesthemaximumamountoftime(inseconds)toestablishcontact
withtheRADIUSserver
beforeretryattemptsbegin.Validvaluesarefrom
1to30.Defaultis20seconds.
serverindex
ip_addressport
Specifiestheindexnumber,IPaddressandtheUDPauthenticationportfor
theRADIUSserver.
secret‐value (Optional)Specif iesanencryptionkeytobeusedforauthentication
betweentheRADIUSclientand
server.