TP-Link Jetstream T1500G-8T User Manual page 559

Configuring AAA
trying to access the switch, and the others act as backup servers in case the first one
breaks down.
■ Adding RADIUS Server
Follow these steps to add RADIUS server on the switch:
Step 1
Step 2
Step 3
Step 4
Step 5
The following example shows how to add a RADIUS server on the switch. Set the IP address
of the server as 192.168.0.10, the authentication port as 1812, the shared key as 123456,
the timeout as 8 seconds and the retransmit number as 3.
Switch#configure
Downloaded from ManualsNet.com
configure
Enter global configuration mode.
radius-server host ip-address [ auth-port port-id ] [ acct-port port-id ] [ timeout time ] [
retransmit number ] [ nas-id nas-id ] key { [ 0 ] string | 7 encrypted-string }
Add the RADIUS server and configure the related parameters as needed.
host ip-address : Enter the IP address of the server running the RADIUS protocol.
auth-port port-id : Specify the UDP destination port on the RADIUS server for authentication
requests. The default setting is 1812.
acct-port port-id: Specify the UDP destination port on the RADIUS server for accounting
requests. The default setting is 1813. Usually, it is used in the 802.1X feature.
timeout time
: Specify the time interval that the switch waits for the server to reply before
resending. The valid values are from 1 to 9 seconds and the default setting is 5 seconds.
retransmit number
server does not respond. The valid values are from 1 to 3 and the default setting is 2.
nas-id nas-id : Specify the name of the NAS (Network Access Server) to be contained in
RADIUS packets for identification. It ranges from 1 to 31 characters. The default value is the
MAC address of the switch. Generally, the NAS indicates the switch itself.
key { [ 0 ] string | 7 encrypted-string }:
encryption type. 0 indicates that an unencrypted key will follow. 7 indicates that a
symmetric encrypted key with a fixed length will follow. By default, the encryption type is 0.
string is the shared key for the switch and the server, which contains 32 characters at most.
encrypted-string is a symmetric encrypted key with a fixed length, which you can copy from
the configuration file of another switch. The key or encrypted-key you configure here will be
displayed in the encrypted form.
show radius-server
Verify the configuration of RADIUS server.
end
Return to privileged EXEC mode.
copy running-config startup-config
Save the settings in the configuration file.
search engine
: Specify the number of times a request is resent to the server if the
Specify the shared key. 0 and 7 represent the
AAA Configuration
User Guide 536