Radius-server – Brocade Network OS Command Reference v4.1.0 User Manual
Page 638

600
Network OS Command Reference
53-1003115-01
radius-server
2
radius-server
Configures the Remote Authentication Dial-In User Service (RADIUS) server.
Synopsis
radius-server host {ip-address | host_name} [auth-port portnum] [protocol {chap|pap |peap}]
[key shared_secret] [encryption-level value_level] [timeout sec] [retries num]
no radius-server host hostname| ip-address
Operands
host {ipaddr | host_name}
Specifies the IP address or host name of the RADIUS server. IPv4 and IPv6
addresses are supported. The maximum supported length for the RADIUS
hostname is 40 characters.
auth-port portnum
Specifies the user datagram protocol (UDP) port used to connect the
RADIUS server for authentication. The valid range is 0 through 65535. The
default port is 1812.
protocol {chap | pap | peap}
Specifies the authentication protocol. Parameters include CHAP, PAP, or
PEAP-MSCHAP. The default is CHAP.
key shared_secret
The text string that is used as the shared secret between the switch and
the RADIUS server. The default is sharedsecret.
The exclamation mark (!) is supported both in RADIUS and TACACS+
servers, and you can specify the shared secret string in either double
quotation marks or use the escape character (\). For example: "secret!key"
or secret\!key.
encryption-level
value_level
Designates the encryption level for the shared secret key operation. This
operand supports JITC certification and compliance. The range of valid
values is from 0 through 7, with 0 being clear text and 7 being the most
heavily encrypted. The default value is 0.
timeout sec
The time to wait for the RADIUS server to respond, in seconds. The default
is 5 seconds.
retries num
The number of attempts allowed to connect to a RADIUS server. The default
is 5 attempts.
Defaults
The following are the default values of the RADIUS server settings:
•
host: There is no default for the host:
•
auth-port: UDP port 1812
•
timeout: 5 seconds
•
retransmit: 5 attempts
•
encryption-level 0
•
key: sharedsecret
•
protocol: CHAP
Command Modes
Global configuration mode