Table of Contents
Advertisement
8.3 Configuring RADIUS
8.3.1 List of configuration commands
The following table lists and describes the configuration commands related to RADIUS.
Table 8-5 Configuration commands (RADIUS)
Command name
aaa group server radius
server
radius-server dead-interval
radius-server host
radius-server key
radius-server retransmit
radius-server timeout
radius-server attribute station-id
capitalize
#
For details about the RADIUS attributes for which this command is used in Layer 2
authentication, see the description of authentication in the Configuration Guide Vol.
2.
8.3.2 Setting authentication methods
As login authentication methods, the following setting examples are described below:
Combination of general-use RADIUS server authentication and local password
authentication
Combination of RADIUS server group authentication and local password
authentication
(1) Setting general-use RADIUS server authentication and local password
authentication
Points to note
In these examples, RADIUS server authentication and local password authentication
are configured as authentication methods. The methods are configured so that if the
RADIUS server authentication fails due to an inability to communicate, such the
RADIUS server not responding, then local password authentication is used.
If authentication fails due to denial of RADIUS authentication, the authentication
process ends at that point, and local password authentication is not performed.
Information about the general-use RADIUS server used for RADIUS authentication
is also configured.
Description
Configures a RADIUS server group.
Configures a RADIUS server host in the RADIUS server group.
Configures the monitoring timer used for automatic-restoration of the
primary RADIUS server.
Configures information about the general-use RADIUS server used
for authentication.
Sets a RADIUS server key for authentication.
Sets the number of allowed retransmissions to the RADIUS server
used for authentication.
Sets a response timeout value for a RADIUS server used for
authentication.
Sends the MAC address that is used for sending data to a RADIUS
server with the RADIUS attribute in upper case. (Used in Layer 2
#
authentication
.)
8 Login Security and RADIUS
93
Advertisement
Table of Contents
