Cisco 7604 Configuration Manual page 799

Chapter 45 Configuring Network Admission Control
Command
Step 12
Router(config)# ip device tracking probe {count
count | interval interval }
Step 13
Router(config)# radius-server host
}
ip_address key string
Step 14
Router(config)# radius-server attribute 8
include-in-access-req
Step 15
Router(config)# radius-server vsa send
authentication
Step 16
Router(config)# ip device tracking [probe {count
count | interval interval }]
Step 17
Router(config)# eou logging
Step 18
end
OL-4266-08
Purpose
(Optional) Configures these parameters for the IP device
tracking table:
• count count—Sets the number of times that the
switch sends the ARP probe. The range is from 1 to
5. The default is 3.
interval interval—Sets the number of seconds that
•
the switch waits for a response before resending the
ARP probe. The range is from 30 to 300 seconds. The
default is 30 seconds.
{ |
(Optional) Configures the RADIUS server parameters.
hostname
For the hostname | ip_address value, specify the
hostname or IP address of the remote RADIUS server.
For the key string value, specify the authentication and
encryption key used between the switch and the RADIUS
daemon running on the RADIUS server. The key is a text
string that must match the encryption key used on the
RADIUS server.
Note
If you want to use multiple RADIUS servers, reenter this
command.
If the switch is connected to nonresponsive hosts,
configures the switch to send the Framed-IP-Address
RADIUS attribute (Attribute[8]) in access-request or
accounting-request packets.
Configures the network access server to recognize and
use vendor-specific attributes.
(Optional) Configures these IP device tracking table
parameters:
probe count count—Sets the number of times that
•
the switch sends the ARP probe for an entry before
removing an entry from the IP device tracking table.
The range is from 1 to 5. The default is 3.
probe interval interval—Sets the number of seconds
•
that the switch waits before resending the ARP
probe. The range is from 30 to 300 seconds. The
default is 30 seconds.
(Optional) Enables EAPoUDP system logging events.
Returns to privileged EXEC mode.
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
Always configure the key as the last item in the
radius-server host command syntax because
leading spaces are ignored, but spaces within and
at the end of the key are used. If you use spaces
in the key, do not enclose the key in quotation
marks unless the quotation marks are part of the
key. This key must match the encryption used on
the RADIUS daemon.
Configuring NAC
45-15