Radius Server Configuration - NEC N8406-023 Command Reference Manual

RADIUS server configuration

NOTE: See the N8406-023 1Gb Intelligent L3 Switch Application Guide for information on RADIUS.
The following table describes the RADIUS Server Configuration commands.
Table 80 RADIUS Server Configuration commands
Command
[no] radius-server primary-host
<IP address> key <1-32
characters>
[no] radius-server secondary-
host <IP address> key <1-32
characters>
radius-server port <UDP port
number>
radius-server retransmit <1-3>
radius-server timeout <1-10>
[no] radius-server telnet-
backdoor
[no] radius-server secure-
backdoor
radius-server enable
no radius-server enable
show radius-server
IMPORTANT:
console or Telnet/SSH/HTTP/HTTPS. Backdoor for console is always enabled, so you can connect using
noradius and the administrator password even if the backdoor (telnet) or secure backdoor (secbd) are
disabled.
If Telnet backdoor is enabled (telnet ena), type in noradius as a backdoor to bypass RADIUS checking,
and use the administrator password to log into the switch. The switch allows this even if RADIUS servers are
available.
If secure backdoor is enabled (secbd ena), type in noradius as a backdoor to bypass RADIUS checking,
and use the administrator password to log into the switch. The switch allows this only if RADIUS servers are
not available.
If RADIUS is enabled, you must login using RADIUS authentication when connecting via the
N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 87
Description
Sets the primary RADIUS server address and shared secret between
the switch and the RADIUS server(s).
Command mode: Global configuration
Sets the secondary RADIUS server address and shared secret
between the switch and the RADIUS server(s).
Command mode: Global configuration
Enter the number of the User Datagram Protocol (UDP) port to be
configured, between 1500-3000. The default is 1645.
Command mode: Global configuration
Sets the number of failed authentication requests before switching to a
different RADIUS server. The range is 1-3 requests. The default is 3
requests.
Command mode: Global configuration
Sets the amount of time, in seconds, before a RADIUS server
authentication attempt is considered to have failed. The range is 1-10
seconds. The default is 3 seconds.
Command mode: Global configuration
Enables or disables the RADIUS back door for telnet/SSH/
HTTP/HTTPS. The default is disabled. This command does not apply
when secure backdoor is enabled.
Command mode: Global configuration
Enables or disables the RADIUS back door using secure password for
telnet/SSH/ HTTP/HTTPS. The default is disabled. This command
does not apply when backdoor (telnet) is enabled.
Command mode: Global configuration
Enables the RADIUS server.
Command mode: Global configuration
Disables the RADIUS server. This is the default.
Command mode: Global configuration
Displays the current RADIUS server parameters.
Command mode: All except User EXEC