Setting The Radius Dead Time - Cisco WS-C4003 - Catalyst 4000 Chassis Switch Software Configuration Manual

Software guide
Table of Contents

Advertisement

Chapter 27
Configuring Switch Access Using AAA
This example shows how to specify the RADIUS retransmit count as 4 and how to verify the
configuration:
Console> (enable) set radius retransmit 4
Radius retransmit count set to 4.
Console> (enable) show radius
Login Authentication:
---------------------
tacacs
radius
local
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Radius Deadtime:
Radius Key:
Radius Retransmit:
Radius Timeout:
Radius-Server
----------------------------- -------
172.20.52.3
Console> (enable)

Setting the RADIUS Dead Time

You can configure the switch so that when a RADIUS server does not respond to an authentication
request, the switch marks that server as dead for the length of time specified by the dead time. Any
authentication requests received during the dead time interval (such as other users attempting to log in
to the switch) are not sent to a RADIUS server marked dead. Configuring a dead time speeds up the
authentication process, by eliminating timeouts and retransmissions to the dead RADIUS server.
If you configure only one RADIUS server, or if all of the configured servers are marked dead, the dead
time is ignored because there are no alternate servers available.
To set the RADIUS dead time, perform this task in privileged mode:
Task
Step 1
Configure the RADIUS server dead time interval. set radius deadtime minutes
Step 2
Verify the RADIUS configuration.
This example shows how to set the RADIUS deadtime interval and verify the configuration:
Console> (enable) set radius deadtime 5
Radius deadtime set to 5 minute(s).
Console> (enable) show radius
Login Authentication:
---------------------
tacacs
radius
local
Enable Authentication: Console Session
78-12647-02
Console Session
----------------
disabled
enabled(primary)
enabled
disabled
enabled(primary)
enabled
Console Session
----------------
disabled
enabled(primary)
enabled
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
Telnet Session
----------------
disabled
enabled(primary)
enabled
Telnet Session
disabled
enabled(primary)
enabled
0 minutes
Secret_RADIUS_key
4
10 seconds
Status
Auth-port
------------
primary
1812
Command
show radius
Telnet Session
----------------
disabled
enabled(primary)
enabled
Telnet Session
Configuring Authentication
27-27

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Catalyst 4000 seriesCatalyst 2948gCatalyst 2980g

Table of Contents