Cisco WS-C6506 Software Manual page 965

Chapter 39 Configuring the Switch Access Using AAA
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Radius Deadtime:
Radius Key:
Radius Retransmit:
Radius Timeout:
Radius-Server
----------------------------- -------
172.20.52.3
172.20.52.2
Console> (enable)
Specifying Optional Attributes for RADIUS Servers
You can specify optional attributes in the RADIUS ACCESS_REQUEST packet. The set radius
attribute command allows you to specify the transmission of certain optional attributes such as
Framed-IP address, NAS-Port, Called-Station-Id, Calling-Station-Id, and so on. You can set attribute
transmission by either the attribute number or the attribute name. Transmission of the attributes is
disabled by default.
Note Software release 7.5(1) supports only the Framed-IP address (Attribute 8).
To specify the optional attributes for the RADIUS server, perform this task in privileged mode:
Task
Step 1
Specify the optional attributes for the RADIUS
server.
Step 2 Verify the RADIUS configuration.
This example shows how to specify and enable the Framed-IP address attribute by number and verify the
configuration:
Console> (enable) set radius attribute 8 include-in-access-req enable
Transmission of Framed-ip address in access-request packet is enabled.
Console> (enable) show radius
RADIUS Deadtime:
RADIUS Key:
RADIUS Retransmit:
RADIUS Timeout:
Framed-Ip Address Transmit:
RADIUS-Server
----------------------------- -------
10.6.140.230
Console> (enable)
This example shows how to specify and disable the Framed-IP address attribute by name:
Console> (enable) set radius attribute framed-ip-address include-in-access-req disable
Transmission of Framed-ip address in access-request packet is disabled.
Console> (enable)
OL-8978-04
Telnet Session
disabled disabled
enabled(primary) enabled(primary)
enabled enabled
5 minutes
Secret_RADIUS_key
4
10 seconds
Status Auth-port
------------
primary 1812
1812
0 minutes
123456
2
5 seconds
Enabled
Status Auth-port
------------
primary 1812
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
Configuring Authentication on the Switch
Command
set radius attribute [number | name]
include-in-access-req [enable | disable]
show radius
Acct-port
------------
1813
39-31