Siemens SCALANCE W1750D CLI - Page 694

CLI Commands
4.20 W
SCALANCE W1750D CLI
694 Function Manual, 03/2019, C79000-G8976-C452-04
no…
Command/Parameter
Description
Range
Default
wlan auth-server
<server- profile>
Configures the external RADIUS server authenti-
cation profile.
— —
acct-modifier
Attributes modifier for accounting request.
—
—
acctport <account-
ing-port>
Configures the accounting port number used for
sending accounting records to the RADIUS server.
— 1813
auth-modifier
Attributes modifier for access request.
—
—
cppm [username
<username> password
<password>]
Configures a username andpassword for the
ClearPass Policy Manager server
— —
cppm-rfc3576-only
Configures a ClearPass Policy Manager server
used for AirGroup CoA with RFC3576 only.
The ClearPass Policy Manager server acts as a
RADIUS server and asynchronously provides the
Air Group parameters for the client device, includ-
ing shared user, shared role and shared location.
— —
cppm-rfc3576-port
<rfc3576- port>
Configures the port number for sending AirGroup
CoA, instead of the standard CoA port.
— 5999
deadtime <time>
Configures a dead time interval for the authentica-
tion server. When two or more authentication
servers are configured on the AP and a server is
unavailable, the dead time configuration deter-
mines the duration for which the authentication
server would be available if the server is marked
as unavailable.
1—1440
minutes
5
drp-ip <IP-address>
<mask> vlan
<vlan> gateway
<gateway-IP- ad-
dress>
Configures the IP address, net mask and VLAN,
which will be used as source address and VLAN
for RADIUS packets.
Before configuring DRP IP address, ensure that
dynamic-radius-proxy is enabled, and a static
virtual controller IP is configured.
— —
ip <host>
Configures the IP address or the host name of the
RADIUS server.
— —
key <key>
Configures a shared key communicating with the
external RADIUS server.
— —
nas-id <ID>
Configures NAS identifier strings for RADIUS
attribute 32, which is sent with RADIUS requests
to the RADIUS server.
— —
nas-ip <IP>
Configures the Virtual Controller IP address as the
NAS address which is sent in data packets.
— —
port <port>
Configures the authorization port number of the
external RADIUS server.
— 1812
radsec [port
<port>]
The
RadSec
command enables secure communi-
cation between the RADIUS server and AP clients
by creating a TLS tunnel between the AP and the
server.
When RadSec is enabled, the
port
command can
be used for specifying the communication port
number for RadSec TLS connection. By default,
the port number is set to 2083.
1-65534 2083