Cisco Catalyst 2960 Series, Configuration Manual

Page: 1007 / 2288

DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode. Enter your password if prompted. enable Step 1
Example:
Switch> enable
Enters the global configuration mode. configure terminal
Example:
Switch# configure terminal
Step 2
Specifies the IP address or hostname of the remote RADIUS server host. radius-server host { hostname |
ip-address } [
auth-port port-number
]
Step 3
• (Optional) For auth-port port-number , specify the UDP destination port
for authentication requests.
[ acct-port port-number ] [ timeout
seconds ] [ retransmit retries ] [ key
string ]
• (Optional) For acct-port port-number , specify the UDP destination port for
accounting requests.
Example:
Switch(config)#
radius-server
•
(Optional) For timeout seconds , specify the time interval that the Switch
waits for the RADIUS server to reply before resending. The range is 1 to
host 172.29.36.49 auth-port 1612
1000. This setting overrides the radius-server timeout global configuration
key rad1
command setting. If no timeout is set with the radius-server host command,
the setting of the radius-server timeout command is used.
• (Optional) For retransmit retries , specify the number of times a RADIUS
request is resent to a server if that server is not responding or responding
slowly. The range is 1 to 1000. If no retransmit value is set with the
radius-server host command, the setting of the radius-server retransmit
global configuration command is used.
• (Optional) For key string , specify the authentication and encryption key
used between the Switch and the RADIUS daemon running on the RADIUS
server.
The key is a text string that must match the encryption key used on the
RADIUS server. Always configure the key as the last item in the
radius-server host command. Leading spaces are ignored, but spaces
within and at the end of the key are used. If you use spaces in your key,
do not enclose the key in quotation marks unless the quotation marks are
part of the key.
Note
To configure the Switch to recognize more than one host entry associated with a
single IP address, enter this command as many times as necessary, making sure
that each UDP port number is different. The Switch software searches for hosts
in the order in which you specify them. Set the timeout, retransmit, and encryption
key values to use with the specific RADIUS host.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
925
How to Configure RADIUS