set radius
Enterasys G-Series CLI Reference 20-5
set radius
Use
this
command
to
enable,
disable,
or
configure
RADIUS
authentication.
Syntax
set radius
{
enable
|
disable
} | {
retries
number-of-retries
} | {
timeout
timeout
} |
{
server
index ip-address port
[
secret-value
] [
realm
{
management-access
|
any
|
network-access
}} | {
realm
{
management-access
|
any
|
network-access
} {
index
|
all
}}
Parameters
Realm-Type
Realm defines who has to go through the RADIUS server for authentication.
• Management-access: This means that anyone trying to access the switch
(Telnet, SSH, Local Management) has to authenticate through the RADIUS
server.
• Network-access: This means that all the users have to authenticate to a RADIUS
server before they are allowed access to the network.
• Any-access: Means that both Management-access and Network-access have
been enabled.
Table 20-1 show radius Output Details (Continued)
Output Field
What It Displays...
enable
|
disable
Enables
or
disables
the
RADIUS
client.
retries
number
‐
of
‐
retries
Specifies
the
number
of
retry
attempts
before
the
RADIUS
server
times
out.
Valid
values
are
from
0
to
10
.
Default
is
3
.
timeout
timeout
Specifies
the
maximum
amount
of
time
(in
seconds)
to
establish
contact
with
the
RADIUS
server
before
retry
attempts
begin.
Valid
values
are
from
1
to
30
.
Default
is
20
seconds.
server
index
ip_address
port
Specifies
the
index
number,
IP
address
and
the
UDP
authentication
port
for
the
RADIUS
server.
secret
‐
value
(Optional)
Specifies
an
encryption
key
to
be
used
for
authentication
between
the
RADIUS
client
and
server.
realm
management
‐
access
|
any
|
network
‐
access
Realm
allows
you
to
define
who
has
to
go
through
the
RADIUS
server
for
authentication.
•
management
‐
access
:
This
means
that
anyone
trying
to
access
the
switch
(Telnet,
SSH,
Local
Management)
has
to
authenticate
through
the
RADIUS
server.
•
network
‐
access
:
This
means
that
all
the
users
have
to
authenticate
to
a
RADIUS
server
before
they
are
allowed
access
to
the
network.
•
any
:
Means
that
both
management
‐
access
and
network
‐
access
have
been
enabled.
Note:
If the
management-access
or
any
access realm has been configured, the
local “admin” account is disabled for access to the switch using the console, Telnet,
or Local Management. Only the
network-access
realm allows access to the local
“admin” account.
index
|
all
Applies
the
realm
setting
to
a
specific
server
or
to
all
servers.
Summary of Contents for G3G170-24
Page 1: ...Enterasys G Series Ethernet Switch CLI Reference Firmware Version 1 00 xx P N 9034358 01...
Page 2: ......
Page 30: ...xxviii...
Page 100: ...set ssl 2 56 Basic Configuration...
Page 132: ...clear lldp port tx tlv 3 32 Discovery Protocol Configuration...
Page 272: ...show spantree nonforwardingreason 6 52 Spanning Tree Configuration...
Page 296: ...set garp timer 7 24 802 1Q VLAN Configuration...
Page 384: ...clear nodealias config 11 34 Logging and Network Management...
Page 438: ...Enabling Router Configuration Modes 14 4 Preparing for Router Mode...
Page 514: ...show ip pimsm staticrp 16 56 IPv4 Routing Protocol Configuration...
Page 524: ...traceroute ipv6 17 10 IPv6 Management...
Page 602: ...show ipv6 ospf virtual link 19 46 OSPFv3 Configuration...
