User Guide for FibeAir® IP-20 All-Outdoor Products, CeraOS 10.5
Page 690 of 825
Ceragon Proprietary and Confidential
21.4.1
RADIUS Overview (CLI)
The RADIUS protocol provides centralized user management services. IP-20
supports RADIUS server and provides a RADIUS client for authentication and
authorization. When RADIUS is enabled, a user attempting to log into the system
from any access channels (CLI, WEB, NMS) is not authenticated locally. Instead,
the user’s credentia
ls are sent to a centralized standard RADIUS server which
indicates to the IP-20 whether the user is known, and which privilege is to be
given to the user.
You can define up to two Radius servers. If you define two, one serves as the
primary server and the other as the secondary server.
21.4.2
Activating RADIUS Authentication (CLI)
To enable or disable Radius access control, enter the following command:
root> platform security radius-admin set <admin>
Table 228: Activate RADIUS CLI Parameters
Parameter Input
Type
Permitted
Values
Description
admin
Variable
enable
disable
Enables or disables Radius access control.
21.4.3
Configuring the RADIUS Server Attributes (CLI)
To configure Radius server attributes, enter the following command:
root> platform security radius-server-communication-ipv4 set
server-id <server-id> ip-address <ip-address> port <radius-
port> retries <retries> timeout <timeout> secret <shared-
secret>
Table 229: Configure RADIUS Server CLI Parameters
Parameter
Input Type
Permitted
Values
Description
server-id
Number
1
2
•
1 - The primary Radius server
•
2 - The secondary Radius server.
ip-address
Dotted
decimal
format
Any valid IP
address
The IP address of the Radius server.
radius-port
Number
0-65535
The port ID of the RADIUS server.
retries
Number
3-30
The number of times the device will try to
communicate with the RADIUS server before
declaring the server to be unreachable.
timeout
Number
1-10
The timeout (in seconds) that the agent will wait in
each communication with the selected RADIUS
server before retrying if no response is received.
