Watchguard V10 Command Line Interface Manual page 120

CHAPTER 3: Configuration Mode Commands
Examples
106
times, to configure a primary and a backup server
connection.
If you want to delete the configuration entries for a
backup RADIUS server, enter the "no backup"
argument.
-ip <a.b.c.d>
This argument establishes the IP address of the
RADIUS server that will be used.
-secret <"password_text">
This argument records the secret password
allowing this appliance to contact the database in
the RADIUS server.
[-authentication <pap|secure_id> ]
This argument establishes which authentication is
being used; PAP or SecurID.
[-port <number>]
This optional argument records the RADIUS server
port number, if needed.
[-user_group <"name">]
This optional argument specifies the name of a user
group profile used by RADIUS users. Be sure to
use the "user_group_profile" command to control
session time and idle timeout for RADIUS users.
WG(config-ras)#database -radius primary
\
-ip 12.10.1.2 -sec confidential \
-auth secure_id -user_group
exec_staff<ENTER>
WG(config-ras)#database -
internal<ENTER>
WG(config-ras)#database -radius backup
\
-ip 12.10.1.3 \
-sec confidential<ENTER>
WatchGuard Vclass 5.1