Allied Telesis AT-9000/12POE Switch User Manual


  Open as PDF
of 1480
 
AT-9000 Switch Command Line User’s Guide
1367
The AUTH-PORT parameter specifies the UDP destination port for
RADIUS authentication requests. If 0 is specified, the server is not used
for authentication. The default UDP port for authentication is 1812.
The KEY parameter specifies the encryption key used by the designated
RADIUS server. The maximum length is 40 characters.
The AUTH-PORT parameter specifies the UDP destination port for
RADIUS authentication requests. The default UDP port is 1812.
The KEY parameter specifies the encryption key used by the designated
RADIUS server. The maximum length is 40 characters. Special characters
are allowed, but spaces are not permitted.
This example adds the IP address 111.111.111.111 as the second
address in the list. The accounting port is 1811, and the authentication port
is 1815. The encryption key is “ATI:”
awplus> enable
awplus# configure terminal
awplus(config)# radius-server host 111.111.111.111 acct-port
1811 auth-port 1815 key ATI
Specifying a
RADIUS Global
Encryption Key
If the RADIUS servers on your network use the same encryption key, use
the RADIUS-SERVER KEY command in the Global Configuration mode to
enter a global encryption key in the client. The format of the command is:
radius-server key
secret
This example specifies “4tea23” as the global encryption key of the
RADIUS servers:
awplus> enable
awplus# configure terminal
awplus(config)# radius-server key 4tea23
To remove the global encryption key without specifying a new value, use
the NO form of this command:
awplus> enable
awplus# configure terminal
awplus(config)# no radius-server key
Specifying the
Server Timeout
When the switch sends an authentication request to a RADIUS server, it
waits a predefined time period for a response. This time period is referred
to as the server timeout value. If the switch does not receive a response to
an authentication request, it queries the next server in the list. If none of
the servers respond, the switch activates the local manager accounts.
To set the server timeout period, use the RADIUS-SERVER TIMEOUT
command in the Global Configuration mode. The range is 1 to 1000
seconds. The default is 5 seconds.