Allied Telesis SwitchBlade x3100 Series Manual page 642

Introduction
Example
ADD RADIUS SERVER=10.10.10.10 AUTHENTICATION=ON ACCOUNT-
ING=ON
6-82
Software Reference for SwitchBlade x3100 Series Switches (Access and Security)
Option Description
RETRIES Specifies the number of times a user authentication
request should be retried. Once the maximum number
of retries has been reached without a response from the
RADIUS server, the next RADIUS or TACACS+ server
or local database is consulted to determine the validity
of the authentication attempt.
In the case where connectivity is lost with the primary
radius server, some supplicants may timeout before
authentication is passed to the secondary server.
Decreasing the RETRIES or TIMEOUT parameter can
improve the likelihood of authentication succeeding in
these cases.
TIMEOUT Used to specify the number of seconds to wait for a
response back from the RADIUS server. If no response
is received within the timeout period either the request
is retried if there are retries remaining, the next
RADIUS or TACACS+ server is contacted or authenti-
cation is attempted against the local user database.
AUTHENTI- Whether the specified server will perform authentica-
CATION tion.
ACCOUNT- Whether to turn accounting ON or OFF for the speci-
ING fied server.
PRIORITY Allows the user to specify the order in which servers
are used. The lower the number, the higher the priority.
If more than one server is set to the same priority, they
are looped through in no specific order. (The order will
follow what appears in the SHOW RADIUS command,
but this could change after a system reboot.)
Since this is a new parameter for 14.2, any existing
radius servers will default to 1 after upgrading.
TYPE Specifies whether the RADIUS Server can be used for
port authentication (802.1X), user login authentication
(LOGIN), or both.
Configuring a TACACS+ Server
Default Value
3
5 seconds
OFF
OFF
1