ZyXEL Communications nwa series - Chapter 8: Monitor; 8.1 Overview

Chapter 16 AAA Server
NWA/WAC Series CLI Reference Guide
89
16.2.2 radius-server Command Example
The following example sets the secret key and timeout period of the default RADIUS server
(172.23.10.100) to “87643210” and 80 seconds.
16.2.3 aaa group server ad Commands
The following table lists the aaa group server ad commands you use to configure a group of
AD servers.
[no] radius-server key secret Sets a password (up to 15 alphanumeric characters) as the key
to be shared between the RADIUS server and the NWA/WAC.
The
no command clears this setting.
[no] radius-server timeout time Sets the search timeout period (in seconds). Enter a number
between 1 and 300. The
no command clears this setting.
Table 54 radius-server Commands (continued)
COMMAND DESCRIPTION
Router# configure terminal
Router(config)# radius-server host 172.23.10.100 auth-port 1812
Router(config)# radius-server key 876543210
Router(config)# radius-server timeout 80
Router(config)# show radius-server
host : 172.23.10.100
authentication port: 1812
key : 876543210
timeout : 80
Router(config)#
Table 55 aaa group server ad Commands
COMMAND DESCRIPTION
clear aaa group server ad [group-name] Deletes all AD server groups or the specified AD server group.
Note: You can NOT delete a server group that is currently in
use.
show aaa group server ad group-name Displays the specified AD server group settings.
[no] aaa group server ad group-name Sets a descriptive name for an AD server group. Use this
command to enter the sub-command mode.
The
no command deletes the specified server group.
aaa group server ad rename group-name
group-name
Changes the descriptive name for an AD server group.
aaa group server ad group-name Enter the sub-command mode to configure an AD server
group.
[no] server alternative-cn-
identifier uid
Sets the second type of identifier that the users can use to log
in if any. For example “name” or “e-mail address”. The
no
command clears this setting.
[no] server basedn basedn Sets the base DN to point to the AD directory on the AD server
group. The
no command clears this setting.
[no] server binddn binddn Sets the user name the NWA/WAC uses to log into the AD
server group. The
no command clears this setting.
[no] server cn-identifier uid Sets the user name the NWA/WAC uses to log into the AD
server group. The
no command clears this setting.