Alcatel-Lucent 7950 SR, System Management Manual

Page: 164 / 462

Generic 802.1x COMMANDS
Page 164 7950 SR OS System Management Guide
server (dot1x)
Syntax server server-index address ip-address secret key [ hash | hash2 ] [ auth-port auth-port ]
[ acct-port acct-port ] [ type server-type ]
no server index
Context config>system>security> dot1x>radius-plcy
Description This command adds a Dot1x server and configures the Dot1x server IP address, index, and key val-
ues.
Up to five Dot1x servers can be configured at any one time. Dot1x servers are accessed in order from
lowest to highest index for authentication requests until a response from a server is received. A higher
indexed server is only queried if no response is received from a lower indexed server (which implies
that the server is not available). If a response from a server is received, no other Dot1x servers are
queried. It is assumed that there are multiple identical servers configured as backups and that the
servers do not have redundant data.
The no form of the command removes the server from the configuration.
Default No Dot1x servers are configured.
Parameters server-index — The index for the Dot1x server. The index determines the sequence in which the
servers are queried for authentication requests. Servers are queried in order from lowest to
highest index.
Values 1 — 5
address ip-address — The IP address of the Dot1x server. Two Dot1x servers cannot have the same
IP address. An error message is generated if the server address is a duplicate.
secret key — The secret key to access the Dot1x server. This secret key must match the password on
the Dot1x server.
Values Up to 128 characters in length.
hash — Specifies the key is entered in an encrypted form. If the hash parameter is not used, the key
is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted
form in the configuration file with the
hash parameter specified.
hash2 — Specifies the key is entered in a more complex encrypted form. If the hash2 parameter is
not used, the less encrypted hash form is assumed.
acct-port acct-port — The UDP port number on which to contact the RADIUS server for accounting
requests.
auth-port auth-port — specifies a UDP port number to be used as a match criteria.
Values 1 — 65535
type server-type — Specifies the server type.
Values authorization, accounting, combined