Cisco C3201FESMIC-TP= - 3201 Fast EN Switch Mobile Interface Card Expansion Module Software Configuration Manual page 90

Configuring and Enabling RADIUS
Command
Step 3
radius-server host {hostname
| ip-address} [auth-port
port-number] [acct-port
port-number] [timeout
seconds] [retransmit retries]
[key string]
Step 4 aaa group server radius
group-name
Step 5 server ip-address
Step 6
end
Step 7
show running-config
Step 8
copy running-config
startup-config
Step 9
To remove the specified RADIUS server, use the no radius-server host hostname | ip-address command
in global configuration mode. To remove a server group from the configuration list, use the no aaa group
server radius group-name command in global configuration mode. To remove the IP address of a
RADIUS server, use the no server ip-address command in server group configuration mode.
Cisco 3200 Series Wireless MIC Software Configuration Guide
26
Purpose
Specifies the IP address or hostname of the remote RADIUS server host.
(Optional) For auth-port port-number, specify the UDP destination port for
•
authentication requests.
• (Optional) For acct-port port-number, specify the UDP destination port for
accounting requests.
(Optional) For timeout seconds, specify the time interval that the bridge waits for
•
the RADIUS server to reply before retransmitting. The range is 1 to 1000. This
setting overrides the interval set using the radius-server timeout command. If no
timeout is set with the radius-server host command, the time interval set with
the radius-server timeout command is used.
(Optional) For retransmit retries, specify the number of times a RADIUS
•
request is resent to a server if that server is not responding or is responding
slowly. The range is from 1 to 1000. If no retransmit value is set with the
radius-server host command, the value set with the radius-server retransmit
command is used.
• (Optional) For key string, specify the authentication and encryption key used
between the bridge and the RADIUS daemon running on the RADIUS server.
The key is a text string that must match the encryption key that is used on the
Note
RADIUS server. Always configure the key as the last item in the
radius-server host command. Leading spaces are ignored, but spaces within
and at the end of the key are used. If you use spaces in the key, do not enclose
the key in quotation marks unless the quotation marks are part of the key.
To configure the bridge to recognize more than one host entry associated with a single
IP address, enter this command as many times as necessary, making sure that each
UDP port number is different. The bridge software searches for hosts in the order in
which you specify them. Set the timeout, retransmit, and encryption key values to use
with the specific RADIUS host.
Defines the AAA server-group with a group name.
This command puts the bridge in a server group configuration mode.
Associates a particular RADIUS server with the defined server group. Repeat this step
for each RADIUS server in the AAA server group.
Note Each server in the group must be previously defined in Step 2.
Returns to privileged EXEC mode.
Verifies your entries.
(Optional) Saves your entries in the configuration file.
Enables RADIUS login authentication. See the
Authentication" section on page
"Configuring RADIUS Login
24.
Administering the WMIC