Cisco Systems OL-6415-04 manual Radius-server host hostname, Acct-port port-number timeout

Chapter 7 Configuring RADIUS Servers

Configuring and Enabling RADIUS

	Command		Purpose
Step 3	radius-server host {hostname		Specify the IP address or host name of the remote RADIUS server host.
	ip-address}[auth-portport-number]		• (Optional) For auth-portport-number, specify the UDP destination
	[acct-port port-number] [timeout
			port for authentication requests.(Optional) For acct-port
	seconds] [retransmit retries] [key
			port-number, specify the UDP destination port for accounting
	string]
			requests.
			• (Optional) For timeout seconds, specify the time interval that the
			access point waits for the RADIUS server to reply before
			retransmitting. The range is 1 to 1000. This setting overrides the
			radius-server timeout global configuration command setting. If no
			timeout is set with the radius-server host command, the setting of
			the radius-server timeout command is used.
			• (Optional) For retransmit retries, specify the number of times a
			RADIUS request is resent to a server if that server is not responding
			or responding slowly. The range is 1 to 1000. If no retransmit value is
			set with the radius-server host command, the setting of the
			radius-server retransmit global configuration command is used.
			• (Optional) For key string, specify the authentication and encryption
			key used between the access point and the RADIUS daemon running
			on the RADIUS server.
			Note The key is a text string that must match the encryption key used
			on the RADIUS server. Always configure the key as the last item
			in the radius-server host command. Leading spaces are ignored,
			but spaces within and at the end of the key are used. If you use
			spaces in your key, do not enclose the key in quotation marks
			unless the quotation marks are part of the key.
			To configure the access point to recognize more than one host entry
			associated with a single IP address, enter this command as many times as
			necessary, making sure that each UDP port number is different. The
			access point software searches for hosts in the order in which you specify
			them. Set the timeout, retransmit, and encryption key values to use with
			the specific RADIUS host.
Step 4	dot11 ssid ssid-string		Enter SSID configuration mode for an SSID on which you need to enable
			accounting. The SSID can consist of up to 32 alphanumeric characters.
			SSIDs are case sensitive.
Step 5	accounting list-name		Enable RADIUS accounting for this SSID. For list-name, specify the
			accounting method list. Click this URL for more information on method
			lists:
			http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cg
			cr/fsecur_c/fsaaa/scfacct.htm#xtocid2
			Note To enable accounting for an SSID, you must include the
			accounting command in the SSID configuration. Click this URL
			to browse to a detailed description of the SSID configuration
			mode accounting command:
			http://www.cisco.com/en/US/products/hw/wireless/ps4570/prod
			ucts_command_reference_chapter09186a008041757f.html#wp2
			449819
		Cisco Wireless ISR and HWIC Access Point Configuration Guide
7-6			OL-6415-04