ES4710BD 10 Slots L2/L3/L4 Chassis Switch

servers, and all the accounting servers can be backup servers for each other. If primary is specified, then the specified RADIUS server will be the primary server.

Example: Sets the RADIUS accounting server of IP address to 100.100.100.60 as the primary server, with the accounting port number as 3000.

Switch(Config)#radius-server accounting host 100.100.100.60 port 3000 primary

20.2.2.18 radius-server authentication host

Command: radius-server authentication host <ip-address> [port <port-number>] [primary] no radius-server authentication host <ip-address>

Function: Specifies the IP address and listening port number for the RADIUS server; the “no radius-server authentication host <IPaddress>” command deletes the RADIUS authentication server

Parameters: <ip-address>stands for the server IP address; <port-number>for listening port number, from 0 to 65535, where 0 stands for non-authentication server usage; primary for primary server.

Command mode: Global Mode

Default: No RADIUS authentication server is configured by default.

Usage Guide: This command is used to specify the IP address and port number of the specified RADIUS server for switch authentication, multiple command instances can be configured. The port parameter is used to specify authentication port number, which must be the same as the specified authentication port in the RADIUS server, the default port number is 1812. If this port number is set to 0, the specified server is regard as non-authenticating. This command can be used repeatedly to configure multiple RADIUS servers communicating with the switch, the configured order is used as the priority for the switch authentication server. If primary is specified, then the specified RADIUS server will be the primary server.

Example: Setting the RADIUS authentication server address as 200.1.1.1. Switch(Config)#radius-server authentication host 200.1.1.1

20.2.2.19 radius-server dead-time

Command: radius-server dead-time <minutes> no radius-server dead-time

Function: Configures the restore time when RADIUS server is down; the “no radius-serverdead-time command restores the default setting.

Parameters: < minute > is the down -restore time for RADIUS server in minutes, the valid range is 1 to 255.

Command mode: Global Mode

Default: The default value is 5 minutes.

Usage Guide: This command specifies the time to wait for the RADIUS server to recover from inaccessible to accessible. When the switch acknowledges a server to be inaccessible, it marks that server as having invalid status, after the interval specified by this command; the system resets the status for that server to valid.

Example: Setting the down-restore time for RADIUS server to 3 minutes. Switch(Config)#radius-server dead-time 3

519

Page 520
Image 520
Accton Technology ES4710BD manual Radius-server authentication host, Radius-server dead-time