Server-Private (Radius) - Cisco CRS User Manual

Authentication, Authorization, and Accounting Commands

server-private (RADIUS)

To configure the IP address of the private RADIUS server for the group server, use the server-private
command in RADIUS server-group configuration mode. To remove the associated private server from the
AAA group server, use the no form of this command .
server-private ip-address [auth-port port-number] [acct-port port-number] [timeout seconds] [retransmit
retries] [key string]
no server-private ip-address [auth-port port-number] [acct-port port-number]
Syntax Description
ip-address
auth-port
port-number
acct-port
port-number
timeout seconds
retransmit retries
key string
Command Default
If no port attributes are defined, the defaults are as follows:
• Authentication port: 1645
• Accounting port: 1646
OL-24740-01
IP address of the RADIUS server host.
(Optional) Specifies the User Datagram Protocol (UDP) destination port for
authentication requests. The port-number argument specifies the port number for
authentication requests. The host is not used for authentication if this value is set to
0. The default value is 1645.
(Optional) Specifies the UDP destination port for accounting requests. The
port-number argument specifies the port number for accounting requests. The host
is not used for accounting services if this value is set to 0. The default value is 1646.
(Optional) Specifies the number of seconds the router waits for the RADIUS server
to reply before retransmitting. The setting overrides the global value of the
radius-server timeout command. If no timeout is specified, the global value is used.
The seconds argument specifies the timeout value in seconds. The range is from 1 to
1000. If no timeout is specified, the global value is used.
(Optional) Specifies the number of times a RADIUS request is resent to a server if
the server is not responding or is responding slowly. The setting overrides the global
setting of the radius-server transmit command.
The retries argument specifies the retransmit value. The range is from 1 to 100. If no
retransmit value is specified, the global value is used.
(Optional) Specifies the authentication and encryption key that is used between the
router and the RADIUS daemon running on the RADIUS server. This key overrides
the global setting of the radius-server key command. If no key string is specified,
the global value is used.
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
server-private (RADIUS)
65