Allied Telesis x510-28GPX, Command Reference Manual

Page: 1869 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1869
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
AAA C
OMMANDS
SERVER
(
RADSECPROXY
-
AAA
)
server (radsecproxy-aaa)
Overview Use this command to add a server to the RadSecProxy AAA application. Local
RADIUS client applications will attempt, via the proxy, to communicate with any
RadSec servers that are operational (in addition to any non-TLS RADIUS servers
that are configured).
Use the no variant of this command to delete a previously-configured server from
the RadSecProxy AAA application.
Syntax
server {< hostname >|< ip-addr >} [timeout <1-1000>] [name-check
{on|off}]
no server {< hostname >|< ip-addr >}
Mode RadSecProxy AAA Configuration Mode
Usage The server may be specified by its domain name or by its IPv4 address. If a domain
name is used, it must be resolvable using a configured DNS name server.
Each server may be configured with a timeout; if not specified, the global timeout
value for RADIUS servers will be used. The global timeout may be changed using
the
radius-server timeout command. The default global timeout is 5 seconds.
Each server may be configured to use certificate name-checking; if not specified,
the global behavior defined by
server name-check or no server name-check will
be used. If name checking is enabled, the Common Name portion of the subject
field of the server’s X.509 certificate must match the domain name or IP address
specified in this command.
Parameter Description
< hostname >
Hostname of RadSec server
< ip-addr >
Specify the client IPv4 address, in dotted decimal notation
(A.B.C.D).
timeout
Specify the amount of time that the RadSecProxy AAA application
should wait before receiving replies from this server. RADIUS
server timeout (which defaults to 5 seconds).
<1-1000>
Time in seconds to wait for a server reply.
name-check
Specify whether or not to enforce certificate name checking for
this client. If the parameter is not specified then the global
behavior, which defaults to
on , is used.
on
Enable name checking for this client.
off
Disable name checking for this client.