1230
Command Reference for AT-IX5-28GPX High Availability, High Power Video Surveillance PoE Switch
C613-50057-01 REV A
AlliedWare Plus™ Operating System - Version 5.4.5-0.x
L
OCAL
RADIUS S
ERVER
C
OMMANDS
USER
(RADIUS
SERVER
)
user (RADIUS server)
Overview
Use this command to register a user to the local RADIUS server.
Use the
no
variant of this command to delete a user from the local RADIUS server.
Syntax
user <
radius-user-name
> [encrypted] password <
user-password
>
[group <
user-group
>]
no user <
radius-user-name
>
Mode
RADIUS Server Configuration
Usage
RADIUS user names cannot contain question mark (
?
), space ( ), or quote (“ “)
characters. RADIUS user names containing the below characters cannot use
certificate authentication:
/ \ ‘$ &()*;< > ‘|
Certificates cannot be created and exported for RADIUS user names that contain
the above characters. We advise you to avoid using these characters in RADIUS
user names if you need to use certificate authentication, because you will not be
able to create and export certificates.
You also can use the IEEE standard format hexadecimal notation
(
HH-HH-HH-HH-HH-HH
) to specify a supplicant MAC address to configure the
user name and user password parameters to use local RADIUS server for MAC
Authentication. See the
AAA Feature Overview and Configuration Guide
for a
sample MAC configuration. See also the command
user 00-db-59-ab-70-37
password 00-db-59-ab-70-37
as shown in the command examples.
Parameter
Description
<
radius-user-name
>
RADIUS user name. This can also be a MAC address in the
IEEE standard format of
HH-HH-HH-HH-HH-HH
if you are
configuring MAC authentication to use local RADIUS server.
encrypted
Specifies that the password is being entered in its
encrypted form, so that it is not further encrypted.
When creating a new user, enter the password in plaintext,
and do not use the
encrypted
parameter.
Use the
encrypted
parameter only when referring to a user
that has previously been created. For instance, when
adding an existing user from another RADIUS server, use
the
encrypted
parameter, and enter the encrypted version
of the password that appears in the output of
show
commands for the user.
<
user-password
>
User password. This can also be a MAC address in the IEEE
standard format of
HH-HH-HH-HH-HH-HH
if you are
configuring MAC authentication to use local RADIUS server.
group
Specify the group for the user.
<
user-group
>
User group name.
