Command Structure - HP ProCurve 5400zl Reference Manual

Command Line Interface Reference Guide
o key <KEY-STR> - specifies the global encryption key, which is
o timeout <1-15> - server response timeout interval in seconds. The
o retransmit <1-5> - specifies the maximum number of retransmission
o dyn-autz-port <UDP-PORT> - specifies the UDP port to listen for
o dead-time <1-1440> - If the switch does not receive a response from a

COMMAND STRUCTURE

■ [no] radius-server
form of command to set the dead-time to 0).
dead-time
■
to set the dead-time to 0).
■ radius-server
Change-of-Authorization and Disconnect messages (default is 3799). (TCP/UDP-PORT)
■ [no] radius-server
acct-port
■
acct-port
■
458)
auth-port
■
(TCP/UDP-PORT)
key
■
460)
auth-port
■
auth-port
■
(p. 459)
acct-port
■
(p. 458)
key
■
460)
dyn-authorization
■
key -- Encryption key to use with the RADIUS server (default is NULL).
■
key -- Encryption key to use with the RADIUS server (default is NULL). (ASCII-STR)
■
© 2009 Hewlett-Packard Development Company, L.P.
encryption key to use for authentication with given server
(default is NULL). Specifying this key overrides the key set for
this server by the 'radius-server key <KEY-STR>' global
configuration command.
used for authentication if encryption key for the server is
not configured. The default is NULL.
default is 5 seconds.
attempts. The default is 3 attempts.
Change-of-Authorization and Disconnect messages. The default
is 3799.
specific RADIUS server, the switch avoids sending any new
authentication requests to that server until the dead-time has
expired. That is, during a new authentication attempt, the
switch bypasses a specified RADIUS server if a dead-time
period is running on the switch for a previous failure to
receive a response from that server. (The switch will still
send new authentication requests to any other configured
RADIUS servers that are not affected by a dead-time
condition.) For a specific RADIUS server, dead-time counting
begins with the end of the last timeout in the last retransmit
attempt of the failed authentication session. When dead-time
is set to 0 (zero), there is no dead-time and the switch will
not bypass a RADIUS server that has failed to respond to an
earlier authentication attempt. (Default: 0.)
dead-time < Min | Max > -- Server unavailability time (default is 0, use the 'no'
< 1 to 1440 > -- Server unavailability time (default is 0, use the 'no' form of command
(p. 459)
dyn-autz-port < 1024 to 49151 > -- UDP port number to listen for
host -- IP address of the RADIUS server to use. (IP-ADDR)
-- Accounting UDP destination port number (default is 1813).
-- Accounting UDP destination port number (default is 1813). (TCP/UDP-PORT)
-- Authentication UDP destination port number (default is 1812).
(p. 459)
-- Encryption key to use with the RADIUS server (default is NULL). (ASCII-STR)
-- Authentication UDP destination port number (default is 1812).
-- Authentication UDP destination port number (default is 1812). (TCP/UDP-PORT)
-- Accounting UDP destination port number (default is 1813). (TCP/UDP-PORT)
-- Encryption key to use with the RADIUS server (default is NULL). (ASCII-STR)
-- Enable/disable dynamic authorization control from this host.
(p. 459)
radius-server
(p. 460)
(p. 460)
(p. 458)
(p.
(p.
(p. 459)
(p.
(p. 459)
(p. 460)
(p. 460)
457