FibeAir IP-20C/S/E
User Guide
Ceragon Proprietary and Confidential
Page 532 of 597
Parameter
Input Type Permitted Values Description
block
Variable
yes
no
yes - blocks the account.
no - unblocks the account.
Example
The following command creates a user account named Tom_Jones, with user
profile “operator”. This user’s account expires on February 1, 2014.
root> platform security access-control user-account add user-
name Tom_Jones profile-name operator expired-date 2014-02-01
21.4
Configuring RADIUS (CLI)
This section includes:
Activating RADIUS Authentication (CLI)
Configuring the RADIUS Server Attributes (CLI)
Viewing RADIUS Access Control and Server Attributes (CLI)
Viewing RADIUS User Permissions and Connectivity (CLI)
Note:
For instructions on configuring a RADIUS server, see
Configuring a RADIUS Server.
21.4.1
RADIUS Overview (CLI)
The RADIUS protocol provides centralized user management services. IP-20
supports RADIUS server and provides a RADIUS client for authentication and
authorization. When RADIUS is enabled, a user attempting to log into the
system from any access channels (CLI, WEB, NMS) is not authenticated locally.
Instead, the user’s credentials are sent to a centralized standard RADIUS
server which indicates to the IP-20 whether the user is known, and which
privilege is to be given to the user.
You can define up to two Radius servers. If you define two, one serves as the
primary server and the other as the secondary server.
21.4.2
Activating RADIUS Authentication (CLI)
To enable or disable Radius access control, enter the following command:
root> platform security radius-admin set <admin>
Table 211: Activate RADIUS CLI Parameters
Parameter
Input Type Permitted Values Description
admin
Variable
enable
disable
Enables or disables Radius access
control.