RADIUS server commands

config radius server add

Use this command to configure the IP address used to connect to a RADIUS server. Up to three servers can be configured for each RADIUS client. If three servers are currently configured, one must be removed using the config radius server remove command before the add command will succeed. Once a server has been added it will be identified in future commands by its IP address.

Format

config radius server add <ipaddr>

config radius server msgauth

Use this command to enable or disable the message authenticator attribute for the specified RADIUS server. Enabling the message authenticator attribute provides additional security for the connection between the RADIUS client and server. Some RADIUS servers require that the message authenticator attribute be enabled before authentication requests from the RADIUS client will be accepted. The IP address specified must match that of a configured server.

Format

config radius server msgauth <ipaddr> <enable/disable>

config radius server port

Use this command to configure which UDP port will be used to access the specified RADIUS server. The IP address specified must match that of the previously configured RADIUS server.

Default 1812

Format

config radius server port <ipaddr> <0-65535>

config radius server primary

Use this command to specify which configured server should be the primary server for this RADIUS client. The primary is the server that is used by default for handling RADIUS requests. The remaining configured servers are used only if the primary server cannot be reached. A maximum of three servers can be configured on each client. Only one server can be configured as the primary server. If a primary server is currently configured and this command is issued, the server specified by the IP address used in this command will become the new primary server. The IP address specified must match that of a configured server.

Format

config radius server primary <ipaddr>

config radius server remove

Use this command to remove a configured RADIUS server. The IP address specified must match that of the previously configured RADIUS server. When a server is removed all configuration for the server is erased including the shared secret. If the removed server was the primary server, one of the remaining configured servers will be used as the RADIUS server for future RADIUS requests.

Format

config radius server remove <ipaddr>

config radius server secret

Use this command to configure the secret shared between the RADIUS client and server. A secret must be configured for each RADIUS server. The IP address specified must match that of a previously configured RADIUS server. When you enter this command, you will be prompted to enter the secret, which must be an alphanumeric value of 20 characters or less.

Format

config radius server secret <ipaddr>

show radius server stats

Use this command to display the statistics for a configured RADIUS server.

Format

show radius server stats <ipaddr>

216

Intel® Blade Server Ethernet Switch Module IXM5414E

Page 226
Image 226
Intel IXM5414E manual Radius server commands