beautypg.com

Radius-server – Brocade Network OS Command Reference v4.1.0 User Manual

Page 638

background image

600

Network OS Command Reference

53-1003115-01

radius-server

2

radius-server

Configures the Remote Authentication Dial-In User Service (RADIUS) server.

Synopsis

radius-server host {ip-address | host_name} [auth-port portnum] [protocol {chap|pap |peap}]
[key shared_secret] [encryption-level value_level] [timeout sec] [retries num]

no radius-server host hostname| ip-address

Operands

host {ipaddr | host_name}

Specifies the IP address or host name of the RADIUS server. IPv4 and IPv6
addresses are supported. The maximum supported length for the RADIUS
hostname is 40 characters.

auth-port portnum

Specifies the user datagram protocol (UDP) port used to connect the
RADIUS server for authentication. The valid range is 0 through 65535. The
default port is 1812.

protocol {chap | pap | peap}

Specifies the authentication protocol. Parameters include CHAP, PAP, or
PEAP-MSCHAP. The default is CHAP.

key shared_secret

The text string that is used as the shared secret between the switch and
the RADIUS server. The default is sharedsecret.
The exclamation mark (!) is supported both in RADIUS and TACACS+
servers, and you can specify the shared secret string in either double
quotation marks or use the escape character (\). For example: "secret!key"
or secret\!key.

encryption-level

value_level

Designates the encryption level for the shared secret key operation. This
operand supports JITC certification and compliance. The range of valid
values is from 0 through 7, with 0 being clear text and 7 being the most
heavily encrypted. The default value is 0.

timeout sec

The time to wait for the RADIUS server to respond, in seconds. The default
is 5 seconds.

retries num

The number of attempts allowed to connect to a RADIUS server. The default
is 5 attempts.

Defaults

The following are the default values of the RADIUS server settings:

host: There is no default for the host:

auth-port: UDP port 1812

timeout: 5 seconds

retransmit: 5 attempts

encryption-level 0

key: sharedsecret

protocol: CHAP

Command Modes

Global configuration mode