Radius authentication configuration commands, Radius authentication configuration commands -119 – Netopia CLI 874 User Manual
Page 131

Motorola Netopia® Router CLI Commands 2-119
interface serial id mode { console | modem }
show interface serial id mode
These commands allow you to set or show the mode for the specified serial por t, either console or modem. In
console mode, the por t automatically detects the baud rate of your terminal emulation software; in modem
mode, the baud rate must be specified.
RADIUS Authentication Configuration Commands
console authentication { local | radius | radius-local [ serial-only ] | local-radius }
show console authentication
These commands allow you to set or show how the router will authenticate users seeking console configuration
access using a remote authentication database maintained by a RADIUS ser ver. It suppor ts four security
database modes: local, radius, radius-local, and local-radius.
Specifying local selects the local router database authentication mechanism.
Specifying radius causes the router to ignore the local database and to authenticate users using the configured
RADIUS ser ver.
Specifying radius-local causes the router to attempt to authenticate a user first using a RADIUS ser ver and
then, if that fails, using the local authentication database.
Specifying radius-local serial-only causes the router to attempt to authenticate a user first using the configured
RADIUS ser ver(s) and then, if that fails and the user is accessing the router via the built-in serial console por t,
using the local authentication database. If the user is accessing the router via telnet or asynchronous dial-in
(via a modem on the AUX por t), and RADIUS authentication fails, the local authentication database is not
consulted and the user is refused access to the router.
Specifying local-radius causes the router to attempt to authenticate a user first using the local authentication
database, and then, if that fails using the configured RADIUS ser ver.
In those modes that involve both RADIUS and the local database, if the local database includes no user-
name/password pairs, authentication will succeed only if the RADIUS ser ver authenticates the user. This
differs from the local mode where no authentication is per formed when the local database is empty.
RADIUS Authentication Configuration Commands
console authentication { local | radius | radius-local [ serial-only ] | local-radius }
show console authentication
radius-server { 1 | 2 } { ip-address | hostname } [ secret secret ]
no radius-server { 1 | 2 }
show radius-server [ 1 | 2 ]
radius identifier identifier