Enterasys Networks D-Series - Manual (Page 467)

set radius
Enterasys D-Series CLI Reference 17-5
set radius
Use this command to enable, disable, or configure RADIUS authentication.
Syntax
set radius {enable | disable} | {retries number-of-retries} | {timeout timeout} |
{server index ip-address port [secret-value] [realm {management-access | any |
network-access}} | {realm {management-access | any | network-access} {index| all}}
Parameters
RADIUS timeout Maximum amount of time (in seconds) to establish contact with the RADIUS server
before retry attempts begin. The default value of 20 can be reset using the set
radius command as described in “
set radius ” on page 17-5.
RADIUS Server RADIUS server’s index number, IP address, and UDP authentication port.
Realm-Type Realm defines who has to go through the RADIUS server for authentication.
• Management-access: This means that anyone trying to access the switch (Telnet,
SSH, Local Management) has to authenticate through the RADIUS server.
• Network-access: This means that all the users have to authenticate to a RADIUS
server before they are allowed access to the network.
• Any-access: Means that both Management-access and Network-access have
been enabled.
Table 17-42 show radius Output Details (Continued)
Output Field What It Displays...
enable | disable Enables or disables the RADIUS client.
retries number‐of‐
retries Specifies the number of retry attempts before the RADIUS server times out.
Valid values are from 0 to 10. Default is 3.
timeout timeout Specifies the maximum amount of time (in seconds) to establish contact
with the RADIUS server before retry attempts begin. Valid values are from 1
to 30. Default is 20 seconds.
server index
ip_address port Specifies the index number, IP address and the UDP authentication port for
the RADIUS server.
secret‐value (Optional) Specifies an encryption key to be used for authentication
between the RADIUS client and server.