beautypg.com

Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 1276

background image

RADIUS Commands

Software Reference for x310 Series Switches

47.8

AlliedWare Plus

TM

Operating System - Version 5.4.4C

C613-50046-01 REV A

If you specify a host without specifying the auth port or the acct port, it will by default be
configured for both authentication and accounting, using the default UDP ports. To set a
host to be a RADIUS server for authentication requests only, set the acct-port parameter
to 0; to set the host to be a RADIUS server for accounting requests only, set the auth-port
parameter to 0.

A RADIUS server is identified by IP address, authentication port and accounting port. A
single host can be configured multiple times with different authentication or accounting
ports. All the RADIUS servers configured with this command are included in the
predefined RADIUS server group radius, which may be used by AAA authentication,
authorization and accounting commands. The client transmits (and retransmits, according
to the retransmit and timeout parameters) RADIUS authentication or accounting requests
to the servers in the order you specify them, until it gets a response.

Examples

To add the RADIUS server 10.0.0.20, use the following commands:

To set the secret key to allied on the RADIUS server 10.0.0.20, use the following
commands:

To delete the RADIUS server 10.0.0.20, use the following commands:

To configure rad1.company.com for authentication only, use the following commands:

To remove the RADIUS server rad1.company.com configured for authentication only,
use the following commands:

To configure rad2.company.com for accounting only, use the following commands:

awplus#

configure terminal

awplus(config)#

radius-server host 10.0.0.20

awplus#

configure terminal

awplus(config)#

radius-server host 10.0.0.20 key allied

awplus#

configure terminal

awplus(config)#

no radius-server host 10.0.0.20

awplus#

configure terminal

awplus(config)#

radius-server host rad1.company.com
acct-port 0

awplus#

configure terminal

awplus(config)#

no radius-server host rad1.company.com
acct-port 0

awplus#

configure terminal

awplus(config)#

radius-server host rad2.company.com
auth-port 0