3 radius server key, 4 radius server msgauth, Radius server key - 26 – Kontron AT890X Full-Size CLI User Manual

Page 268: Radius server msgauth - 26

Advertising
background image

Management Commands

AT8901/2/3

AT8901/2/3 CLI Reference Manual

Page 6 - 26

If you use the

<acct>

token, the command configures the IP address to use for the

RADIUS accounting server. You can only configure one accounting server. If an
accounting server is currently configured, use the “no” form of the command to
remove it from the configuration. The IP address you specify must match that of a
previously configured accounting server. If you use the optional

<port>

parameter, the

command configures the UDP port to use when connecting to the RADIUS accounting
server. If a

<port>

is already configured for the accounting server, the new

<port>

replaces the previously configured

<port>

. The

<port>

must be a value in the range 1

- 65535, with 1813 being the default.

NOTE: To re-configure a RADIUS accounting server to use the default UDP

<port>

, set the

<port>

parameter to 1813.

Format

radius server host

{auth | acct} <ipaddr> [<port>]

Mode

Global Config

6.8.2.1

no radius server host

This command is used to remove the configured RADIUS authentication server or the
RADIUS accounting server. If the 'auth' token is used, the previously configured
RADIUS authentication server is removed from the configuration. Similarly, if the
'acct' token is used, the previously configured RADIUS accounting server is removed
from the configuration. The

<ipaddr>

parameter must match the IP address of the

previously configured RADIUS authentication / accounting server.

Format

no radius server host {auth | acct} <ipaddress>

Mode

Global Config

6.8.3

radius server key

This command is used to configure the shared secret between the RADIUS client and
the RADIUS accounting / authentication server. Depending on whether the 'auth' or
'acct' token is used, the shared secret is configured for the RADIUS authentication or
RADIUS accounting server. The IP address provided must match a previously
configured server. When this command is executed, the secret is prompted.

NOTE: The secret must be an alphanumeric value not exceeding 16 charac-

ters.

Format

radius server key {auth | acct} <ipaddr>

Mode

Global Config

6.8.4

radius server msgauth

This command enables the message authenticator attribute for a specified server.

Format

radius server msgauth <ipaddr>

Mode

Global Config

6.8.4.1

no radius server msgauth

This command disables the message authenticator attribute for a specified server.

Advertising