Table of Contents
Advertisement
Use no more than 8 characters for a user ID, and no more than 16 characters for a
password.
8.2.4 Connecting to RADIUS servers
(1) Switch identification on the RADIUS server side
The RADIUS server uses the sender IP address of the request packet to identify the
RADIUS client. The Switch uses the IP address of the sender VLAN interface.
(2) Port number of the RADIUS server
Port 1812 is assigned to the RADIUS authentication service in RFC 2865. Unless
otherwise specified, the Switch uses port 1812 in requests sent to a RADIUS server.
However, some RADIUS servers might use port 1645, not port 1812. For a RADIUS server
of this type, specify
configuration command. Because you can specify any value from 1 to 65535 in the
auth-port
(3) RADIUS server information configurable on the Switch
The following RADIUS server information is configurable on the Switch.
General-use RADIUS server information
Used for both login authentication and Layer 2 authentication functionality.
Authentication RADIUS server information (IEEE 802.1X, Web authentication, and
MAC-based authentication)
Used only for each Layer 2 authentication functionality.
RADIUS server group information
Information about grouped general-use RADIUS servers, which is used for both
login authentication and the Layer 2 authentication functionality.
For details about setting and using Layer 2 authentication functionality and RADIUS server
information, see 5 Overview of Layer 2 Authentication in the Configuration Guide Vol. 2.
Assign RADIUS server group information by using the general-use RADIUS server
information that has been set. The following figure shows the relationship between the
RADIUS server group and the general-use RADIUS server.
1645
in the
auth-port
parameter, the RADIUS server is supported regardless of the specified port.
8 Login Security and RADIUS
parameter of the
radius-server host
91
Advertisement
Table of Contents
