Configuring RADIUS Server Support for Switch Services

RADIUS Server Configuration for Per-Port CoS (802.1p Priority) and Rate-Limiting

Syntax: show port-access authenticator [ port-list ] show rate-limit all

show qos port-priority

These commands display the CoS and Rate-Limiting settings specified by the RADIUS server used to grant authentication for a given client on a given port. When the authenticated client session closes, the switch resets these fields to the values to which they are configured in the switch’s running-config file.

show port-access authenticator [ port-list] displays, for 802.1X authentication, the status of RADIUS-imposed overrides of the switch’s per-port CoS and Rate-Limiting configuration.

show rate-limit all displays, for all port-access authentication methods (802.1X, Web-Auth, and MAC-Auth), the status of RADIUS-imposed overrides of the switch’s per-port Rate- Limiting configuration.

show qos port-prioritydisplays, for all port-access authentica­ tion methods (802.1X, Web-Auth, and MAC-Auth), the status of RADIUS-imposed overrides of the switch’s per-port CoS (802.1p) priority for inbound packets.

ProCurve (config)# show rate-limit all

Inbound Rate Limit Maximum %

Port Limit

Mode

Radius Override

-----+ -------- --------- ---------------

1 Disabled Disabled No-override

2

500

kbps

80

3

50

%

No-override

4

Disabled

Disabled

No-override

5

Disabled

Disabled

No-override

6 Disabled Disabled No-override

7 Disabled Disabled No-override

Port 2 has a rate limit of 500 Kbps with no RADIUS override.

Port 3 has a 50 percent rate limit, which is 50% of the port’s available bandwidth.

The 80 in the Radius Override field indicates that there is an active client session in which the RADIUS server used to authenticate the most recent client has imposed an inbound bandwidth limit of 80%.

Disabled indicates that there is no default rate-limit configured for the port. No­ override indicates that there is currently no RADIUS-imposed rate-limit on the associated ports.

Figure 6-1. Example of Displaying Inbound Rate-Limiting Imposed by a RADIUS Session

6-7