Cisco Systems 78-11424-03 Network Router User Manual


 
2-29
Cisco Content Services Switch Basic Configuration Guide
78-11424-03
Chapter 2 Configuring User Profiles and CSS Parameters
Configuring the CSS as a Client of a RADIUS Server
radius-server retransmit number - Set the number of retransmissions for an
authentication request to the RADIUS server.
radius-server timeout seconds - Set the time interval the CSS waits before
retransmitting an authentication request.
Note After configuring the RADIUS server, enable RADIUS
authentication for console and virtual logins (if the user and
password pair is not in the local user database) through the virtual
authentication and console authentication commands. Refer to
“Controlling Remote Access to the CSS” later in this chapter for
details.
Specifying a Primary RADIUS Server
Use the radius-server primary command to specify a primary RADIUS server
to authenticate user information from the CSS RADIUS client (console or virtual
authentication). The syntax for this global configuration mode command is:
radius-server primary ip_address secret string {auth-port port_number}
Options and variables include:
primary ip_address - The IP address or host name for the primary RADIUS
server. Enter the address in either dotted-decimal IP notation (for example,
192.168.11.1) or mnemonic host-name format (for example,
myhost.mydomain.com).
secret string - The shared secret text string between the primary RADIUS
server and the CSS RADIUS client. The shared secret allows authentication
transactions between the client and primary RADIUS server to occur. Enter
the shared secret as a case-sensitive string with no spaces (16 characters
maximum).
auth-port port_number - Optional. The UDP port on the primary RADIUS
server allocated to receive authentication packets from the RADIUS client.
Valid entries are 0 to 65535. The default is 1645.
To specify a primary RADIUS server, enter:
(config)# radius-server primary 172.27.56.76 secret Hello
auth-port 30658