171| Authentication Servers DellPowerConnect W- Series ArubaOS 6.2 | User Guide

RADIUS Server Authenticat ion Codes

A configured RADIUS server returns the following standardresponse codes.

Code Description

0 AuthenticationOK.
1 Authenticationfailed—user/password combination not correct.
2 Authenticationrequest timed out—No response from server.
3 Internalauthentication error.
4 BadResponse from RADIUS server. Verify shared secret is correct.
5 NoRADIUS authentication server is configured.
6 Challenge from server. (This does not necessarily indicate an error condi tion.)

Table49 :

RADIUS Authentication ResponseCodes
RADIUS S erver Fully Qualified Do main Name s
If you define a RADIUS server using the FQDN of the serverrather than its IP address, the controller periodically
generatesa D NS requestand cache the IP address returned in the DNS response. To view the IP address that
currentlycorrelate to each RA DIUS server FQDN, access the command-line interface in config mode and issue the
followingco mmand:
show aaa fqdn-server-names
Set a DN S Query Interval
If you define a RADIUS server using the FQDN of the serverrather than its IP address, the controller periodically
generatesa D NS requestand cache the I P address returnedin the DNS response. By default, DNS requests are sent
every 15 minutes.
You can useei therthe WebUI or the CLI t o configurehow often the controller should generatea D NS requestto
cache the IP address for a RADIUS serveri dentified via its fully qualified domain name (FQDN).
Using the WebUI
1. N avigate to the Configuration > Security > Authentication > Advanced page.
2. I n the DNS Query Interval(min) field, enter a new DNS query interval, from 1-1440 minutes, inclusive.
3. Click Apply to save your changes.
Using the CLI
(host)(config) #aaa dns-query-period <minutes>
Configuring an RFC-3576 RAD IUS Server
You can configurea RADIUS server to send user disconnect, change-of-authorization (CoA), and session ti meout
messages as described in RFC 3576, “ Dynamic Authorization Extensions to Remote Dial In User Service
(RADIUS)”.