Security
RADIUS
Cisco Small Business SG200 Series 8-port Smart Switches Administration Guide
135
11
Configuring Global RADIUS Settings
To configure the global settings:
STEP 1
Click
Security
>
RADIUS
in the navigation window.
STEP 2
Enter the parameters:
•
Retries
—Maximum number of times the RADIUS client retransmits requests
to the RADIUS server. The range is 1 to 10. The default is 3.
•
Timeout for Reply
—Number of seconds the switch waits for a RADIUS
server to reply to a server request before sending another request. The
range is 1 to 30. The default is 3.
•
Dead Time
—Length of time a RADIUS server will be bypassed once the
switch determines it is unavailable. Bypassing unavailable switches
improves switch response times. The range is 0 to 2000. The default is 0.
•
RADIUS Attribute 4
(NAS-IP Address)—Select to enable the switch to
include the network access server (NAS) attribute in Access Request
RADIUS server packets. If this option is disabled, the RADIUS client uses the
switch management port address as the NAS-IP Address.
•
NAS-IP Address
—IP address to include in Access Request packets. This
field is editable only when the RADIUS Attribute 4 is enabled. The address
should be unique to the NAS within the scope of the RADIUS server.
STEP 3
Click
Apply
. Your changes are saved to the Running Configuration.
Adding a RADIUS Server
You can configure multiple RADIUS servers and configure priority levels that
determine the order in which they are contacted.
!
CAUTION
All management users are created with read-write permissions. Ensure that all
RADIUS server users you configure have the same privilege levels; otherwise they
are not granted access to the switch.