Cisco IE 4000, Software Configuration Manual

Page: 181 / 1066

177
Configuring Switch-Based Authentication
How to Configure Switch-Based Authentication
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication
Configuring CoA on the Switch
5. radius-server deadtime minutes Specifies the number of minutes a RADIUS server, which is not responding
to authentication requests, to be skipped, thus avoiding the wait for the
request to timeout before trying the next configured server. The default is
0; the range is 1 to 1440 minutes.
6. radius-server vsa send [ accounting |
authentication ]
Enables the switch to recognize and use VSAs as defined by RADIUS IETF
attribute 26.

(Optional) accounting —Limits the set of recognized vendor-specific
attributes to only accounting attributes.

(Optional) authentication —Limits the set of recognized
vendor-specific attributes to only authentication attributes.
If you enter this command without keywords, both accounting and
authentication vendor-specific attributes are used.
7. end Returns to privileged EXEC mode.
Command Purpose
Command Purpose
1. configure terminal Enters global configuration mode.
2. radius-server host { hostname | ip-address } non-standard Specifies the IP address or hostname of the remote
RADIUS server host and identifies that it is using a
vendor-proprietary implementation of RADIUS.
3. radius-server key string Specifies the shared secret text string used between
the switch and the vendor-proprietary RADIUS
server. The switch and the RADIUS server use this
text string to encrypt passwords and exchange
responses.
Note: The key is a text string that must match the
encryption key used on the RADIUS server. Leading
spaces are ignored, but spaces within and at the end
of the key are used. If you use spaces in your key, do
not enclose the key in quotation marks unless the
quotation marks are part of the key.
4. end Returns to privileged EXEC mode.
5. show running-config Verifies your settings.
6. copy running-config startup-config (Optional) Saves your entries in the configuration file.
Command Purpose
1. configure terminal Enters global configuration mode.
2. aaa new-model Enables AAA.
3. aaa server radius dynamic-author Configures the switch as an authentication, authorization, and accounting
(AAA) server to facilitate interaction with an external policy server.