Alcatel-Lucent 7450 System Management Manual page 188

Generic 802.1x COMMANDS
server (dot1x)
Syntax server server-index address ip-address secret key [hash | hash2] [auth-port auth-port]
[acct-port acct-port] [type server-type]
no server index
Context config>system>security> dot1x>radius-plcy
Description This command adds a Dot1x server and configures the Dot1x server IP address, index, and key val-
ues.
Up to five Dot1x servers can be configured at any one time. Dot1x servers are accessed in order from
lowest to highest index for authentication requests until a response from a server is received. A higher
indexed server is only queried if no response is received from a lower indexed server (which implies
that the server is not available). If a response from a server is received, no other Dot1x servers are
queried. It is assumed that there are multiple identical servers configured as backups and that the
servers do not have redundant data.
The no form of the command removes the server from the configuration.
Default No Dot1x servers are configured.
Parameters server-index — The index for the Dot1x server. The index determines the sequence in which the
address ip-address — The IP address of the Dot1x server. Two Dot1x servers cannot have the same
secret key — The secret key to access the Dot1x server. This secret key must match the password on
hash — Specifies the key is entered in an encrypted form. If the hash parameter is not used, the key
hash2 — Specifies the key is entered in a more complex encrypted form. If the hash2 parameter is
acct-port acct-port — The UDP port number on which to contact the RADIUS server for accounting
auth-port auth-port — specifies a UDP port number to be used as a match criteria.
type server-type — Specifies the server type.
Page 188
servers are queried for authentication requests. Servers are queried in order from lowest to
highest index.
Values 1 — 5
IP address. An error message is generated if the server address is a duplicate.
the Dot1x server.
Values Up to 128 characters in length.
is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted
form in the configuration file with the hash parameter specified.
not used, the less encrypted hash form is assumed.
requests.
Values
1 — 65535
Values authorization, accounting, combined
7450 ESS System Mangement Guide