Netopia CLI 874 manual Radius Authentication Configuration Commands

Motorola Netopia® Router CLI Commands 2-119

interface serial id mode { console modem } show interface serial id mode

These commands allow you to set or show the mode for the specified serial port, either console or modem. In console mode, the port automatically detects the baud rate of your terminal emulation software; in modem mode, the baud rate must be specified.

RADIUS Authentication Configuration Commands

RADIUS Authentication Configuration Commands

console authentication { local radius radius-local [ serial-only ] local-radius } show console authentication

radius-server{ 1 2 } { ip-address hostname } [ secret secret ] no radius-server{ 1 2 }

show radius-server [ 1 2 ]

radius identifier identifier

console authentication { local radius radius-local [ serial-only ] local-radius } show console authentication

These commands allow you to set or show how the router will authenticate users seeking console configuration access using a remote authentication database maintained by a RADIUS server. It supports four security database modes: local, radius, radius-local, and local-radius.

Specifying local selects the local router database authentication mechanism.

Specifying radius causes the router to ignore the local database and to authenticate users using the configured RADIUS server.

Specifying radius-localcauses the router to attempt to authenticate a user first using a RADIUS server and then, if that fails, using the local authentication database.

Specifying radius-localserial-onlycauses the router to attempt to authenticate a user first using the configured RADIUS server(s) and then, if that fails and the user is accessing the router via the built-in serial console port, using the local authentication database. If the user is accessing the router via telnet or asynchronous dial-in (via a modem on the AUX port), and RADIUS authentication fails, the local authentication database is not consulted and the user is refused access to the router.

Specifying local-radiuscauses the router to attempt to authenticate a user first using the local authentication database, and then, if that fails using the configured RADIUS server.

In those modes that involve both RADIUS and the local database, if the local database includes no user- name/password pairs, authentication will succeed only if the RADIUS server authenticates the user. This differs from the local mode where no authentication is performed when the local database is empty.