Using The Cli - TP-Link T1600G-18TS Configuration Manual

Configuring Network Security
Note:
If a port is in an LAG, its 802.1X authentication function cannot be enabled. Also, a port with 802.1X
authentication enabled cannot be added to any LAG.

6.2 Using the CLI

6.2.1 Configuring the RADIUS Server
Follow these steps to configure RADIUS:
Step 1
Step 2
Step 3
Step 4
configure
Enter global configuration mode.
aaa enable
Enable the AAA function globally.
radius-server host ip-address [ auth-port port-id ] [ acct-port port-id ] [ timeout time ] [
retransmit number ] [ key { [ 0 ] string | 7 encrypted-string } ]
Add the RADIUS server and configure the related parameters as needed.
host ip-address : Enter the IP address of the server running the RADIUS protocol.
auth-port port-id : Specify the UDP destination port on the RADIUS server for authentication
requests. The default setting is 1812.
acct-port port-id: Specify the UDP destination port on the RADIUS server for accounting
requests. The default setting is 1813. Generally, the accounting feature is not used in the
authentication account management.
timeout time : Specify the time interval that the switch waits for the server to reply before
resending. The valid values are from 1 to 9 seconds and the default setting is 5 seconds.
retransmit number : Specify the number of times a request is resent to the server if the
server does not respond. The valid values are from 1 to 3 and the default setting is 2.
key { [ 0 ] string | 7 encrypted-string }:
type. 0 indicates that an unencrypted key will follow. 7 indicates that a symmetric encrypted
key with a fixed length will follow. By default, the encryption type is 0.
key for the switch and the server, which contains 31 characters at most.
a symmetric encrypted key with a fixed length, which you can copy from the configuration
file of another switch. The key or encrypted-key you configured here will be displayed in the
encrypted form.
aaa group radius group-name
Create a radius server group.
radius: Specify the group type as radius.
group-name : Specify a name for the group.
Specify the shared key. 0 and 7 prevent the encryption
802.1X Configuration
is the shared
string
is
encrypted-string
Configuration Guide 578