Radius-Server Dead-Criteria - Cisco Catalyst 3560-X Command Reference Manual

radius-server dead-criteria

radius-server dead-criteria
Syntax Description
Defaults
Command Modes
Command History
Usage Guidelines
Examples
Catalyst 3750-X and 3560-X Switch Command Reference
2-472
Downloaded from www.Manualslib.com
Use the radius-server dead-criteria global configuration command on the switch stack or on a
standalone switch to configure the conditions that determine when a RADIUS server is considered
unavailable or dead. Use the no form of this command to return to the default settings.
radius-server dead-criteria [time seconds [tries number] | tries number]
no radius-server dead-criteria [time seconds [tries number] | tries number]
time seconds (Optional) Set the time in seconds during which the switch does not need to get a valid
response from the RADIUS server. The range is from 1 to 120 seconds.
tries number (Optional) Set the number of times that the switch does not get a valid response from
the RADIUS server before the server is considered unavailable. The range is from 1 to
100.
The switch dynamically determines the seconds value that is from 10 to 60 seconds.
The switch dynamically determines the tries value that is from 10 to 100.
Global configuration
Release Modification
12.2(53)SE2 This command was introduced.
We recommend that you configure the seconds and number parameters as follows:
• Use the radius-server timeout seconds global configuration command to specify the time in
seconds during which the switch waits for a RADIUS server to respond before the IEEE 802.1x
authentication times out. The switch dynamically determines the default seconds value that is from
10 to 60 seconds.
Use the radius-server retransmit retries global configuration command to specify the number of
•
times the switch tries to reach the RADIUS servers before considering the servers to be unavailable.
The switch dynamically determines the default tries value that is from 10 to 100.
• The seconds parameter is less than or equal to the number of retransmission attempts times the time
in seconds before the IEEE 802.1x authentication times out.
• The tries parameter should be the same as the number of retransmission attempts.
This example shows how to configure 60 as the time and 10 as the number of tries, the conditions that
determine when a RADIUS server is considered unavailable
Switch(config)# radius-server dead-criteria time 60 tries 10
You can verify your settings by entering the show running-config privileged EXEC command.
manuals search engine
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
OL-21522-02