beautypg.com

Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 1261

background image

RADIUS Introduction and Configuration

Software Reference for x310 Series Switches

C613-50046-01 REV A

AlliedWare Plus

TM

Operating System - Version 5.4.4C

46.11

To configure per-server RADIUS server communication, use the following command in the
Global Configuration mode:

To configure global communication settings between the switch and a RADIUS server, use
the following radius-server commands in the Global Configuration mode:

Mode and Command

Command Purpose

awplus(config)#

radius-server host
{<hostname>|
<ip-address>}
[auth-port <port-number>]
[acct-port <port-number>]
[timeout <seconds>]
[retransmit <retries>]
[key <string>]

Specifies the IP address or host name of the
remote RADIUS server host and assigns
authentication and accounting destination UDP
port numbers.
Use the

auth-port <port-number>

option to

configure a specific UDP port on this RADIUS
server to be used solely for authentication.
Use the

acct-port <port-number>

option to

configure a specific UDP port on this RADIUS
server to be used solely for accounting.
To configure the network access server to
recognize more than one host entry associated
with a single IP address, simply repeat this
command as many times as necessary, making
sure that each UDP port number is different.
Set the timeout, retransmit, and encryption key
values to use with the specific RADIUS host. If no
timeout is set, the global value is used; otherwise,
enter a value in the range 1 to 1000.
If no retransmit value is set, the global value is
used; otherwise enter a value in the range 1 to
1000. If no key string is specified, the global value
is used.

Mode and Command

Command Purpose

awplus(config)#

radius-server key <key>

Specifies the shared secret text string used
between the switch and a RADIUS server (no
default is set).

awplus(config)#

radius-server retransmit
<retries>

Specifies how many times the switch transmits
each RADIUS request to the RADIUS server before
giving up (the default is 3).

awplus(config)#

radius-server timeout
<seconds>

Specifies for how many seconds a switch waits for
a reply to a RADIUS request before retransmitting
the request.

awplus(config)#

radius-server deadtime
<minutes>

Specifies for how many minutes a RADIUS server
that is not responding to authentication requests
is passed over by requests for RADIUS
authentication.