Filter
Top Products
PowerConnect B-Series FCX Configuration Guide 1191
53-1002266-01
Configuring RADIUS security
32
PowerConnect(config)#radius-server key mirabeau
Syntax: radius-server key [0 | 1] <string>
When you display the configuration of the Dell PowerConnect device, the RADIUS key is encrypted.
Example
PowerConnect(config)#radius-server key 1 abc
PowerConnect(config)#write terminal
...
radius-server host 1.2.3.5
radius key 1 $!2d
NOTE
Encryption of the RADIUS keys is done by default. The 0 parameter disables encryption. The 1
parameter is not required; it is provided for backwards compatibility.
Setting the retransmission limit
The retransmit parameter specifies the maximum number of retransmission attempts. When an
authentication request times out, the Dell software will retransmit the request up to the maximum
number of retransmissions configured. The default retransmit value is 3 retries. The range of
retransmit values is from 1 – 5.
To set the RADIUS retransmit limit, enter a command such as the following.
PowerConnect(config)#radius-server retransmit 5
Syntax: radius-server retransmit <number>
Setting the timeout parameter
The timeout parameter specifies how many seconds the Dell PowerConnect device waits for a
response from the RADIUS server before either retrying the authentication request, or determining
that the RADIUS server is unavailable and moving on to the next authentication method in the
authentication-method list. The timeout can be from 1 – 15 seconds. The default is 3 seconds.
PowerConnect(config)#radius-server timeout 5
Syntax: radius-server timeout <number>
RADIUS over IPv6
Dell PowerConnect devices support the ability to send RADIUS packets over an IPv6 network.
To enable the Dell PowerConnect device to send RADIUS packets over IPv6, enter a command such
as the following at the Global CONFIG level of the CLI.
PowerConnect(config)#radius-server host ipv6 3000::300
Syntax: radius-server host ipv6 <ipv6-host address>
The <ipv6-host address> is the IPv6 address of the RADIUS server. When you enter the IPv6 host
address, you do not need to specify the prefix length. A prefix length of 128 is implied.