Chapter 3. Command Reference

delete an IP

Use configure terminal address-group remove to delete an IP address group. In this example, the

address group

“test” group is deleted:

 

hostname# conf t address-group remove test

 

 

 

conf t authentication

 

The configure terminal authentication command configures RADIUS authentication and privilege

 

groups on the device.

 

privilege-groups remove name

 

deletes a privilege group.

 

privilege-groups update name [web-filtering-bypass] [firewall-authentication]

 

[vpn-client-access]

 

adds privileges to the named privilege group. These privileges will be assigned to users that

 

authenticate either via RADIUS or via the local database.

 

radius

 

controls RADIUS authentication.

default-privilege-group priv-group

defines a privilege group for a user currently unassigned to a privilege group on the RADIUS server.

disable

disables RADIUS authentication.

enable

enables RADIUS authentication.

retries number

defines the number of times that the device will attempt to connect to the RADIUS server. If the RADIUS server does not respond after that number of retries, the device will use the local database for authentication.

server < primary secondary > address [port port] shared-secret string auth-method < pap chap >

configures the settings for the RADIUS server. You can configure both a primary and secondary server.

server secondary none

removes the configuration for a secondary RADIUS server.

timeout seconds

defines the time in seconds before the device will again attempt to connect to the RADIUS server (if no response was originally received from the server).

36 X Family CLI Reference V 2.5.1