Add radiusserver – Allied Telesis AT-S63 User Manual

Page 686

Advertising
background image

Chapter 40: TACACS+ and RADIUS Commands

686

Section IX: Management Security

ADD RADIUSSERVER

Syntax

add radiusserver server|ipaddress=

ipaddress

order=

value

[secret=

string

] [port=

value

] [accport=

value

]

Parameters

server or

Specifies an IP address of a RADIUS server. The

ipaddress

parameters are equivalent.

order

Specifies the order that the RADIUS servers are queried by
the switch. This value can be from 1 to 3. The servers are
queried starting with 1.

secret

Specifies the encryption key used for this server. The
maximum length is 39 characters.

port

Specifies the UDP (User Datagram Protocol) port of the
RADIUS server. The default is port 1812.

accport

Specifies the UDP port for RADIUS accounting. The default
is port 1813.

Description

This command specifies the IP addresses of the RADIUS servers and the
order they are to be queried by the switch. There can be up to three
servers, but you can specify only one at a time with this command. You
may specify an encryption key, a RADIUS UDP port, and a RADIUS
accounting UDP port.

Note

The switch must communicate with the authentication server
through a local network or subnet that has a routing interface. The
switch uses the IP address of the interface as its source address
when sending packets to the server. For background information,
refer to “Routing Interfaces and Management Features” on
page 557. Fo
r instructions on how to add a routing interface to the
switch, refer to “ADD IP INTERFACE” on page 570.

Examples

The following command adds a RADIUS server with the 149.245.22.22 IP
address and specifies it as the first server in the list:

add radiusserver ipaddress=149.245.22.22 order=1

Advertising