Ip csg radius proxy – Cisco OL-15491-01 User Manual

Page 139

Advertising
background image

A-139

Cisco Content Services Gateway - 2nd Generation Release 2.0 Installation and Configuration Guide

OL-15491-01

Appendix A CSG2 Command Reference

ip csg radius proxy

ip csg radius proxy

To specify that the CSG2 is to be a proxy for RADIUS messages, use the ip csg radius proxy command
in global configuration mode. To stop the CSG2 from proxying for RADIUS messages, use the no form
of this command.

ip csg radius proxy [vrf csg-vrf-name] csg-address [vrf server-vrf-name] server-address

csg-source-address [key [encrypt] secret-string] [vrf sub-vrf-name]

no ip csg radius proxy [vrf csg-vrf-name] csg-address server-address

Syntax Description

vrf csg-vrf-name

(Optional) Virtual Routing and Forwarding (VRF) table which the CSG2 IP
address is to use for RADIUS communication.

Note

The VRF table name is defined using the vrf definition command in
global configuration mode. VRF table names supported by the CSG2
can be from 1 to 32 characters long, and can include uppercase or
lowercase letters, numbers, and any special characters.

The CSG2 does not support the use of the word forwarding as a valid
VRF name.

csg-address

Specifies the CSG2 IP address.

The CSG2 IP address must be a virtual IP address, and it must be unique (or
the IP address-VRF name combination must be unique, if VRF is configured).
The CSG2 IP address (or the IP address-VRF name combination) must not be
specified in other CSG2 commands, and it must not match any real IP address,
virtual IP address, or alias IP address (or IP address-VRF name combination)
configured on the CSG2.

If you want the CSG2 RADIUS proxy IP address to be a member of a CSG2
interface subnet, you must configure the CSG2 IP address as follows:

In non-redundant configurations, you must configure the CSG2 IP address
as a secondary IP address configured on the appropriate interface.

In redundant configurations, you must configure the CSG2 IP address as a
standby secondary IP address on the appropriate interface.

Note

The CSG2 performs radius proxy processing only on User Datagram
Protocol (UDP) traffic that is destined for the server IP address. The
server IP address cannot be used for any other UDP communication
with the CSG2.

vrf server-vrf-name

(Optional) Virtual Routing and Forwarding (VRF) table which the server IP
address is to use for RADIUS communication.

Note

The VRF table name is defined using the vrf definition command in
global configuration mode. VRF table names supported by the CSG2
can be from 1 to 32 characters long, and can include uppercase or
lowercase letters, numbers, and any special characters.

The CSG2 does not support the use of the word forwarding as a valid
VRF name.

server-address

Specifies the server IP address.

Advertising