Configuring Router-To-Radius-Server Communication - Cisco 7604 Configuration Manual

Chapter 46 Configuring IEEE 802.1X Port-Based Authentication
AuthSM State
BendSM State
PortStatus
MaxReq
MultiHosts
Port Control
QuietPeriod
Re-authentication = Disabled
ReAuthPeriod
ServerTimeout
SuppTimeout
TxPeriod

Configuring Router-to-RADIUS-Server Communication

RADIUS security servers are identified by any of the following:
•
•
•
•
The combination of the IP address and UDP port number creates a unique identifier, which enables
RADIUS requests to be sent to multiple UDP ports on a server at the same IP address. If two different
host entries on the same RADIUS server are configured for the same service (for example,
authentication) the second host entry configured acts as the failover backup to the first one. The RADIUS
host entries are tried in the order that they were configured.
To configure the RADIUS server parameters, perform this task:
Command
Step 1
Router(config)# ip radius source-interface
interface_name
Router(config)# no ip radius source-interface
Step 2
Router(config)# radius-server host { hostname |
ip_address }
Router(config)# no radius-server host { hostname |
ip_address }
Step 3
Router(config)# radius-server key string
Step 4
Router(config)# end
When you configure the RADIUS server parameters, note the following information:
•
•
OL-4266-08
= FORCE UNAUTHORIZED
= IDLE
= UNAUTHORIZED
= 2
= Disabled
= Force UnAuthorized
= 60 Seconds
= 3600 Seconds
= 30 Seconds
= 30 Seconds
= 30 Seconds
Host name
Host IP address
Host name and specific UDP port numbers
IP address and specific UDP port numbers
For hostname or ip_address, specify the host name or IP address of the remote RADIUS server.
Specify the key string on a separate command line.
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
Configuring 802.1X Port-Based Authentication
Purpose
Specifies that the RADIUS packets have the IP address of
the indicated interface.
Prevents the RADIUS packets from having the IP address
of the previously indicated interface.
Configures the RADIUS server host name or IP address
on the router.
If you want to use multiple RADIUS servers, reenter this
command.
Deletes the specified RADIUS server.
Configures the authorization and encryption key used
between the router and the RADIUS daemon running on
the RADIUS server.
Returns to privileged EXEC mode.
46-9