Radius server commands, Radius server commands 215 – Intel BLADE SERVER IXM5414E Manuale d'uso

Pagina 238

Advertising
background image

Command Line Interface Management

215

Current Server IP Address

The IP address of the RADIUS server currently used for authentication.

Number of Configured Servers

The number of RADIUS servers that have been configured.

Max Number of Retransmits

The maximum number of times a request packet will be retransmitted.

Timeout Duration (secs)

The timeout value, in seconds, for request retransmissions.

Accounting Mode

Indicates whether accounting is currently enabled.

RADIUS server commands

config radius server add

Use this command to configure the IP address used to connect to a RADIUS server. Up to three
servers can be configured for each RADIUS client. If three servers are currently configured, one
must be removed using the config radius server remove command before the add command will
succeed. Once a server has been added it will be identified in future commands by its IP address.

Format

config radius server add <ipaddr>

config radius server msgauth

Use this command to enable or disable the message authenticator attribute for the specified RADIUS
server. Enabling the message authenticator attribute provides additional security for the connection
between the RADIUS client and server. Some RADIUS servers require that the message
authenticator attribute be enabled before authentication requests from the RADIUS client will be
accepted. The IP address specified must match that of a configured server.

Format

config radius server msgauth <ipaddr> <enable/disable>

config radius server port

Use this command to configure which UDP port will be used to access the specified RADIUS
server. The IP address specified must match that of the previously configured RADIUS server.

Default

1812

Format

config radius server port <ipaddr> <0-65535>

config radius server primary

Use this command to specify which configured server should be the primary server for this RADIUS
client. The primary is the server that is used by default for handling RADIUS requests. The
remaining configured servers are used only if the primary server cannot be reached. A maximum of
three servers can be configured on each client. Only one server can be configured as the primary
server. If a primary server is currently configured and this command is issued, the server specified
by the IP address used in this command will become the new primary server. The IP address
specified must match that of a configured server.

Format

config radius server primary <ipaddr>

config radius server remove

Use this command to remove a configured RADIUS server. The IP address specified must match
that of the previously configured RADIUS server. When a server is removed all configuration for
the server is erased including the shared secret. If the removed server was the primary server, one of
the remaining configured servers will be used as the RADIUS server for future RADIUS requests.

Advertising