Cisco SG200 Series Administration Manual page 148

Security
RADIUS
STEP 1
STEP 2
STEP 3
Cisco Small Business SG200 Series 8-port Smart Switch
To add a RADIUS Server to the RADIUS Table:
Click Add
Enter the parameters:
• RADIUS Server—IP address or hostname of the server.
• Priority—The lower the priority number value, higher the priority of the
server. For example, server configured with priority value 1 has higher
priority than server configured with priority value 2. If all the servers are
configured with the same or the default priority value, the switch tries the
RADIUS servers in a first-come, first served basis. The range is 1 to 65535.
The default is 8.
• Key String—A shared secret text string used for authenticating and
encrypting all RADIUS communications between the switch and the RADIUS
server. This secret must match the secret configured on the RADIUS server.
This must be an ASCII alphanumeric value between 32 to 176 characters.
• Authentication Port—Port number used for RADIUS authentication
requests and replies. The default port, 1812, is the well-know IANA port
number for RADIUS authentication services. The range is 1025 to 65535.
The default is1812.
• Message Authenticator—This field is selected by default. When enabled,
the message authenticator attribute is included in RADIUS request
messages to the server. This attribute protects the RADIUS messages from
spoofing and tampering. The shared secret is used as the key. If the RADIUS
Message Authenticator attribute is present in the packet, it is verified by the
server. If verification fails, the server drops the request packet.
Click Apply and then click Close. Your changes are saved to the Running
Configuration.
10
148