Dell 6.2 Server User Manual


 
171 | AuthenticationServers DellPowerConnectW-SeriesArubaOS6.2 | User Guide
RADIUS Server Authentication Codes
A configured RADIUS server returns the following standard response codes.
Code Description
0 Authentication OK.
1 Authentication failed—user/password combination not correct.
2 Authentication request timed out—No response from server.
3 Internal authentication error.
4 Bad Response from RADIUS server. Verify shared secret is correct.
5 No RADIUS authentication server is configured.
6 Challenge from server. (This does not necessarily indicate an error condition.)
Table 49:
RADIUS Authentication Response Codes
RADIUS Server Fully Qualified Domain Names
If you define a RADIUS server using the FQDN of the server rather than its IP address, the controller periodically
generates a DNS request and cache the IP address returned in the DNS response. To view the IP address that
currently correlate to each RADIUS server FQDN, access the command-line interface in config mode and issue the
following command:
show aaa fqdn-server-names
Set a DNS Query Interval
If you define a RADIUS server using the FQDN of the server rather than its IP address, the controller periodically
generates a DNS request and cache the IP address returned in the DNS response. By default, DNS requests are sent
every 15 minutes.
You can use either the WebUI or the CLI to configure how often the controller should generate a DNS request to
cache the IP address for a RADIUS server identified via its fully qualified domain name (FQDN).
Using the WebUI
1. Navigate to the Configuration > Security > Authentication > Advanced page.
2. In the DNS Query Interval (min) field, enter a new DNS query interval, from 1-1440 minutes, inclusive.
3. Click Apply to save your changes.
Using the CLI
(host)(config) #aaa dns-query-period <minutes>
Configuring an RFC-3576 RADIUS Server
You can configure a RADIUS server to send user disconnect, change-of-authorization (CoA), and session timeout
messages as described in RFC 3576, “Dynamic Authorization Extensions to Remote Dial In User Service
(RADIUS)”.