Authentication Commands
38 IOLAN SDS/SCS/STS CLI Reference Guide, Version 3.6
Set Authentication RADIUS
Description Sets RADIUS parameters.
User Level Admin
Syntax set authentication radius [accounting on|off]
[acct-authenticator on|off] [acct-port <UDP_port>]
[auth-port <UDP_port>] [nas-identifier <nas_id>]
[nas-ip-address auto|specify <ipv4_address>]
[nas-ipv6-address auto|specify <ipv6_address>] [retry <integer>]
[timeout <integer>]
Options accounting
Enables/disables RADIUS accounting.
acct-authenticator
Enables/disables whether or not the IOLAN validates the RADIUS accounting
response.
acct-port
The port that the RADIUS host listens to for accounting requests. The default port is
1813.
auth-port
The port that the RADIUS host listens to for authentication requests. The default port is
1812.
nas-identifier
This is the string that identifies the Network Address Server (NAS) that is originating
the Access-Request to authenticate a user.
Field Format: Maximum 31 characters, including spaces
nas-ip-address auto
When specified, the IOLAN will send the IOLAN’s Ethernet 1 IPv4 address to the
RADIUS server. This is the default.
nas-ip-address specify <ipv4_address>
When specified, the IOLAN will send the specified IPv4 address to the RADIUS server.
The default is 0.0.0.0.
nas-ipv6-address auto
When specified, the IOLAN will send the IOLAN’s IPv6 address to the RADIUS
server. This is the default.
nas-ipv6-address specify <ipv6_address>
When specified, the IOLAN will send the specified IPv6 address to the RADIUS server.
retry
The number of times the IOLAN tries to connect to the RADIUS server before erroring
out. Valid values are 0-255. The default is 5.
timeout
The time, in seconds, that the IOLAN waits to receive a reply after sending out a
request to a RADIUS accounting or authentication host. If no reply is received before
the timeout period expires, the IOLAN will retry the same host up to and including the
number of retry attempts. Valid values are 1-255. The default is 3 seconds.