RADIUS Servers Managing Authentication Servers
page 20-14 OmniSwitch 6600 Family Network Configuration Guide April 2006
The following table lists the VSAs supported for RADIUS accounting servers. The attributes in the
radius.ini file may be modified if necessary.
Configuring the RADIUS Client
Use the aaa radius-server command to configure RADIUS parameters on the switch.
When creating a new server, at least one host name or IP address (specified by the host keyword) is
required as well as the shared secret (specified by the key keyword).
In this example, the server name is rad1, the host address is 10.10.2.1, the backup address is 10.10.3.5,
and the shared secret is amadeus. Note that the shared secret must be configured exactly the same as on
the server.
-> aaa radius-server rad1 host 10.10.2.1 10.10.3.5 key amadeus
To modify a RADIUS server, enter the server name and the desired parameter to be modified.
-> aaa radius-server rad1 key mozart
If you are modifying the server and have just entered the aaa radius-server command to create or modify
the server, you can use command prefix recognition. For example:
-> aaa radius-server rad1 retransmit 5
-> timeout 5
For information about server defaults, see “Server Defaults” on page20-3.
To remove a RADIUS server, use the no form of the command:
-> no aaa radius-server rad1
Note that only one server may be deleted at a time.
Num. Accounting VSA Type Description
1 Alcatel-Auth-Group integer The authenticated VLAN number. The only protocol
associated with this attribute is Ethernet II. If other
protocols are required, use the protocol attribute
instead.
2 Alcatel-Slot-Port string Slot(s)/port(s) valid for the user.
4 Alcatel-Client-IP-Addr dotted
decimal
The IP address used for Telnet only.
5 Alcatel-Group-Desc string Description of the authenticated VLAN.
RADIUS server keywords
key
host
retransmit
timeout
auth-port
acct-port