Configuring Security
Configuring RADIUS Parameters
Cisco Small Business 200 1.1 Series Smart Switch Administration Guide
233
17
Configuring RADIUS Parameters
Remote Authorization Dial-In User Service (RADIUS) servers provide a centralized
802.1X or MAC-based network access control. The switch is a RADIUS client that
can use a RADIUS server to provide centralized security.
For the RADIUS server to grant access to the web-based switch configuration
utility, the RADIUS server must return cisco-avpair = shell:priv-lvl=15.
To set the RADIUS server parameters:
STEP 1
Click
Security
>
RADIUS
. The
RADIUS
page displays.
STEP 2
Enter the default RADIUS parameters. Values entered in the
Default Parameters
are applied to all servers. If a value is not entered for a specific server (in the
Add
RADIUS Server
page) the switch uses the values in these fields.
•
IP Version
—Displays the supported IP version: IPv6 and/or IPv4 subnet.
•
Retries
—Enter the number of transmitted requests that are sent to the
RADIUS server before a failure is considered to have occurred.
•
Timeout for Reply
—Enter the number of seconds that the switch waits for
an answer from the RADIUS server before retrying the query, or switching to
the next server.
•
Dead Time
—Enter the number of minutes that elapse before a non-
responsive RADIUS server is bypassed for service requests. If the value is 0,
the server is not bypassed.
•
Key String
—Enter the default key string used for authenticating and
encrypting between the switch and the RADIUS server. This key must match
the key configured on the RADIUS server. A key string is used to encrypt
communications by using MD5. A key configured for an individual RADIUS
server has precedence over the default key that is used if there is no key
provided for an individual server.
STEP 3
Click
Apply
. The RADIUS settings for the switch are updated in the Running
Configuration file.