Cisco Systems XR manual Radius source-interface, SR-48

Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software

radius source-interface

radius source-interface

To force RADIUS to use the IP address of a specified interface or subinterface for all outgoing RADIUS packets, use the radius source-interfacecommand in global configuration mode. To prevent only the specified interface from being the default and not from being used for all outgoing RADIUS packets, use the no form of this command.

radius source-interface interface-name

no radius source-interface

Syntax Description	interface-name	Name of the interface that RADIUS uses for all of its outgoing packets.
Defaults	If a specific source interface is not configured, or the interface is down or does not have an IP address
	configured, the system selects an IP address.

Command Modes

Command History

Global configuration

Release	Modification
Release 3.2	This command was introduced on the Cisco CRS-1 and
	Cisco XR 12000 Series Router.
Release 3.3.0	No modification.

Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

Use the radius source-interfacecommand to set the IP address of the specified interface or subinterface for all outgoing RADIUS packets. This address is used as long as the interface or subinterface is in the up state. In this way, the RADIUS server can use one IP address entry for every network access client instead of maintaining a list of IP addresses.

The specified interface or subinterface must have an IP address associated with it. If the specified interface or subinterface does not have an IP address or is in the down state, then RADIUS reverts to the default. To avoid this, add an IP address to the interface or subinterface or bring the interface to the up state.

The radius source-interfacecommand is especially useful in cases in which the router has many interfaces or subinterfaces and you want to ensure that all RADIUS packets from a particular router have the same IP address.

Task ID	Task ID	Operations
	aaa	read, write

Cisco IOS XR System Security Command Reference

SR-48