Kontron CP6923, Справочное руководство, Страница: 417 / 480

CP6923 Management Commands
Page 7 - 31 CP6923 CLI Reference Manual
7.9.4 radius server host
This command is used to configure the RADIUS authentication and accounting server. If you use the
<auth>
parameter, the command configures the IP address or hostname to use to connect to a RADIUS authentication
server. You can configure up to 3 servers per RADIUS client. If the maximum number of configured servers is
reached, the command fails until you remove one of the servers by issuing the “no” form of the command. If you use
the optional
<port>
parameter, the command configures the UDP port number to use when connecting to the
configured RADIUS server. The
<port>
number range is 1 - 65535, with 1812 being the default value.
If you use the
<acct>
token, the command configures the IP address or hostname to use for the RADIUS
accounting server. You can only configure one accounting server. If an accounting server is currently configured,
use the “no” form of the command to remove it from the configuration. The IP address or hostname you specify must
match that of a previously configured accounting server. If you use the optional
<port>
parameter, the command
configures the UDP port to use when connecting to the RADIUS accounting server. If a <port> is already
configured for the accounting server, the new
<port>
replaces the previously configured
<port>
. The
<port>
must be a value in the range 1 - 65535, with 1813 being the default.
7.9.4.1 no radius server host
This command is used to remove the configured RADIUS authentication server or the RADIUS accounting server.
If the 'auth' token is used, the previously configured RADIUS authentication server is removed from the
configuration. Similarly, if the 'acct' token is used, the previously configured RADIUS accounting server is removed
from the configuration. The
<ipaddr|hostname>
parameter must match the IP address or hostname of the
previously configured RADIUS authentication / accounting server.
7.9.5 radius server key
This command is used to configure the shared secret between the RADIUS client and the RADIUS accounting /
authentication server. Depending on whether the 'auth' or 'acct' token is used, the shared secret is configured for
the RADIUS authentication or RADIUS accounting server. The IP address or hostname provided must match a
previously configured server. When this command is executed, the secret is prompted.
Text-based configuration supports Radius server’s secrets in encrypted and non-encrypted format. When you save
the configuration, these secret keys are stored in encrypted format only. If you want to enter the key in encrypted
Note: To re-configure a RADIUS authentication server to use the default UDP
<port>
, set the
<port>
parameter to 1812.
Note: To re-configure a RADIUS accounting server to use the default UDP
<port>
, set the
<port>
parameter to 1813.
Format
radius server host {auth | acct} <ipaddr|hostname> [<port>]
Mode Global Config
Format
no radius server host {auth | acct} <ipaddress|hostname>
Mode Global Config