Cisco Asr 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide - Cisco ASR 9000 Series Configuration Manual

Configuring Authentication, Authorization, and Accounting Functions
Command or Action
Example:
RP/0/RSP0/CPU0:router(config)# radius-server host 1.2.3.4
acct-port 455 auth-port 567
Step 3 radius-server attribute list list_name attribute_list
Example:
RP/0/RSP0/CPU0:router(config)# radius-server attribute
list rad_list a b
Step 4 radius-server key 7 encrypted_text
Example:
RP/0/RSP0/CPU0:router(config-radius-host)# radius-server
key 7 rngiry
Step 5
radius-server disallow null-username
Example:
RP/0/RSP0/CPU0:router(config)# radius-server disallow
null-username
Step 6
radius-server dead-criteria time value
Example:
RP/0/RSP0/CPU0:router(config)# radius-server
dead-criteria time 40
Step 7
radius-server dead-criteria tries value
Example:
RP/0/RSP0/CPU0:router(config)# radius-server
dead-criteria tries 50
Step 8 radius-server deadtime limit
Example:
RP/0/RSP0/CPU0:router(config)# radius-server deadtime 67
Step 9 radius-server ipv4 dscp codepoint_value
Example:
RP/0/RSP0/CPU0:router(config)# radius-server ipv4 dscp
45
Step 10
radius-server load-balance method least-outstanding
ignore-preferred-server batch-size size
OL-26148-02
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
Configuring RADIUS Server Settings
Purpose
authentication port numbers range from 0 to 65535.
If no value is specified, then the default is 1645 for
the auth-port and 1646 for the acct-port.
Specifies the radius server attributes list, and
customizes the selected radius attributes.
Specifies the per-server encryption key that overrides
the default, and takes the value 0 or 7, which indicates
that the unencrypted key will follow.
Specifies that the null-username is disallowed for the
radius server.
Specifies the dead server detection criteria for a
configured RADIUS server. The time (in seconds)
specifies the minimum time that must elapse since a
response is received from this RADIUS server.
Specify the value for the number of consecutive
timeouts that must occur on the router before the
RADIUS server is marked as dead. The value ranges
from 1 to 100.
Specifies the time in minutes for which a RADIUS
server is marked dead. The deadtime limit is specified
in minutes and ranges from 1 to 1440. If no value is
specified, the default is 0.
Allows radius packets to be marked with a specific
differentiated services code point (DSCP) value. This
code point value ranges from 0 to 63.
Configures the radius load-balancing options by
picking the server with the least outstanding
transactions. This load-balancing method uses the
4.2.x
27