Appendix A CSG2 Command Reference

ip csg radius endpoint

ip csg radius endpoint

To identify the CSG2 as an endpoint for RADIUS Accounting messages, use the ip csg radius endpoint command in global configuration mode. To remove the endpoint identification, use the no form of this command.

ip csg radius endpoint [vrf csg-vrf-name]csg-addresskey [encrypt] secret-string[vrf sub-vrf-name]

no ip csg radius endpoint [vrf csg-vrf-name]csg-address

Syntax Description

vrf csg-vrf-name

(Optional) Virtual Routing and Forwarding (VRF) table which the CSG2 IP

 

 

address is to use for RADIUS communication.

 

 

 

 

csg-address

Specifies the CSG2 IP address.

 

 

The CSG2 IP address must be a virtual IP address, and it must be unique (or the

 

 

IP address-VRF name combination must be unique, if VRF is configured). The

 

 

CSG2 IP address (or the IP address-VRF name combination) must not be

 

 

specified in other CSG2 commands, and it must not match any real IP address,

 

 

virtual IP address, or alias IP address (or IP address-VRF name combination)

 

 

configured on the CSG2.

 

 

If you want the CSG2 RADIUS endpoint IP address to be a member of a CSG2

 

 

interface subnet, you must configure the CSG2 IP address as follows:

 

 

In non-redundant configurations, you must configure the CSG2 IP address

 

 

as a secondary IP address configured on the appropriate interface.

 

 

In redundant configurations, you must configure the CSG2 IP address as a

 

 

standby secondary IP address on the appropriate interface.

 

 

Note The CSG2 performs radius endpoint processing only on User Datagram

 

 

Protocol (UDP) traffic that is destined for the server IP address. The

 

 

server IP address cannot be used for any other UDP communication with

 

 

the CSG2.

 

 

 

 

key

Specifies a RADIUS key.

 

 

 

 

encrypt

(Optional) Indicates how the secret-stringis represented when the configuration

 

 

is displayed (for example, show run), or how it is written to nonvolatile memory

 

 

(for example, write memory).

 

 

The valid values are:

 

 

0—The secret-stringis stored in plain text. This is the default setting.

 

 

7—The secret-stringis encrypted before it is displayed or written to

 

 

nonvolatile memory.

 

 

Note If your router is configured to encrypt all passwords, then the password

 

 

is represented as 7 followed by the encrypted text. See the Cisco IOS

 

 

service command for more details.

 

 

 

 

 

Cisco Content Services Gateway - 2nd Generation Release 2.0 Installation and Configuration Guide

 

 

 

 

 

 

 

OL-15491-01

 

 

A-117

 

 

 

 

 

Page 117
Image 117
Cisco Systems OL-15491-01 appendix Ip csg radius endpoint, Key, Specifies a Radius key, 117