![background image](http://html.mh-extra.com/html/foundry-networks/switch-and-router/switch-and-router_installation-and-configuration-manual_2324275102.webp)
Foundry Switch and Router Installation and Configuration Guide
3 - 38
December 2000
Syntax:
radius-server host <ip-addr> | <server-name> [auth-port <number> acct-port <number>]
The
host
<ip-addr>
|
<server-name> parameter is either an IP address or an ASCII text string.
The <auth-port> parameter is the Authentication port number; it is an optional parameter. The default is 1645.
The <acct-port> parameter is the Accounting port number; it is an optional parameter. The default is 1646.
Setting RADIUS Parameters
You can set the following parameters in a RADIUS configuration:
•
RADIUS key – This parameter specifies the value that the Foundry device sends to the RADIUS server when
trying to authenticate user access.
•
Retransmit interval – This parameter specifies how many times the Foundry device will resend an
authentication request when the RADIUS server does not respond. The retransmit value can be from 1 – 5
times. The default is 3 times.
•
Timeout – This parameter specifies how many seconds the Foundry device waits for a response from a
RADIUS server before either retrying the authentication request, or determining that the RADIUS servers are
unavailable and moving on to the next authentication method in the authentication-method list. The timeout
can be from 1 – 15 seconds. The default is 3 seconds.
Setting the RADIUS Key
The
key
parameter in the
radius-server
command is used to encrypt RADIUS packets before they are sent over
the network. The value for the
key
parameter on the Foundry device should match the one configured on the
RADIUS server. The key can be from 1 – 32 characters in length.
To specify a RADIUS server key:
BigIron(config)# radius-server key mirabeau
Syntax:
radius-server key <key-string>
Setting the Retransmission Limit
The
retransmit
parameter specifies the maximum number of retransmission attempts. When an authentication
request times out, the Foundry software will retransmit the request up to the maximum number of retransmissions
configured. The default retransmit value is 3 retries. The range of retransmit values is from 1 – 5.
To set the RADIUS retransmit limit:
BigIron(config)# radius-server retransmit 5
Syntax:
radius-server retransmit <number>
Setting the Timeout Parameter
The
timeout
parameter specifies how many seconds the Foundry device waits for a response from the RADIUS
server before either retrying the authentication request, or determining that the RADIUS server is unavailable and
moving on to the next authentication method in the authentication-method list. The timeout can be from 1 – 15
seconds. The default is 3 seconds.
BigIron(config)# radius-server timeout 5
Syntax:
radius-server timeout <number>
Configuring Authentication-Method Lists for RADIUS
You can use RADIUS to authenticate Telnet/SSH access and access to Privileged EXEC level and CONFIG levels
of the CLI. When configuring RADIUS authentication, you create authentication-method lists specifically for these
access methods, specifying RADIUS as the primary authentication method.
Within the authentication-method list, RADIUS is specified as the primary authentication method and up to six
backup authentication methods are specified as alternates. If RADIUS authentication fails due to an error, the
device tries the backup authentication methods in the order they appear in the list.
Summary of Contents for Switch and Router
Page 2: ...December 2000 Copyright 2000 by Foundry Networks Inc ...
Page 26: ...Foundry Switch and Router Installation and Configuration Guide xxvi December 2000 ...
Page 64: ...Foundry Switch and Router Installation and Configuration Guide 2 34 December 2000 ...
Page 162: ...Foundry Switch and Router Installation and Configuration Guide 5 38 December 2000 ...
Page 196: ...Foundry Switch and Router Installation and Configuration Guide 6 34 December 2000 ...
Page 208: ...Foundry Switch and Router Installation and Configuration Guide 7 12 December 2000 ...
Page 236: ...Foundry Switch and Router Installation and Configuration Guide 8 28 December 2000 ...
Page 258: ...Foundry Switch and Router Installation and Configuration Guide 9 22 December 2000 ...
Page 420: ...Foundry Switch and Router Installation and Configuration Guide 13 32 December 2000 ...
Page 442: ...Foundry Switch and Router Installation and Configuration Guide 14 22 December 2000 ...
Page 554: ...Foundry Switch and Router Installation and Configuration Guide 15 112 December 2000 ...
Page 574: ...Foundry Switch and Router Installation and Configuration Guide 16 20 December 2000 ...
Page 626: ...Foundry Switch and Router Installation and Configuration Guide 17 52 December 2000 ...
Page 682: ...Foundry Switch and Router Installation and Configuration Guide 18 56 December 2000 ...
Page 826: ...Foundry Switch and Router Installation and Configuration Guide 20 20 December 2000 ...
Page 994: ...Foundry Switch and Router Installation and Configuration Guide 26 10 December 2000 ...
Page 1004: ...Foundry Switch and Router Installation and Configuration Guide B 6 December 2000 ...
Page 1044: ...Foundry Switch and Router Installation and Configuration Guide C 40 December 2000 ...
Page 1048: ...Foundry Switch and Router Installation and Configuration Guide D 4 December 2000 ...
Page 1070: ...Foundry Switch and Router Installation and Configuration Guide Index 18 December 2000 ...