Configures the RADIUS service options.
Syntax
After the radius-service
command is entered to enter RADIUS server configuration mode, the following
configuration syntax is available:
{
auto-fallback-disable
|
backup
friendly-name
language
name
|
group-attrs
attr-value
user-role
|
ip
ip-address
|
mor
number
|
no-response-fail
|
out-of-band
|
port
port-number
|
response-window
window
|
revive-interval
interval
|
sanity-timer
seconds
|
shared-secret
password
|
threshold
number
|
type
[
radiusv|
radius-acct]
|
zombie-period
seconds
}
Command Default
A RADIUS server is not configured.
Parameters
- auto-fallback-disable
- Disables auto fallback.
- backup
- Enables backup RADIUS support
and related settings.
- friendly-name
friendly-name
- Sets a user-friendly name for
the RADIUS server.
- group-attrs
attr-value
user-role
- Sets attribute and user role values for the User
Traffic Profile Mapping.
- ip
ip-address
- Sets the IP address of the
primary RADIUS server.
- mor
number
- Sets the Maximum Outstanding Requests (MOR) per
server. Number must be 0 or in the range of 10 to 4096.
- no-response-fail
- Enables the no response
fail.
- out-of-band
- Enables the RFC 5580 Out of
Band location delivery feature.
- port
port-number
- Sets the port number for the
primary RADIUS server
- response-window
window
- Sets the response window, in seconds. Range from
5 to 30.
- revive-interval
interval
- Sets the revive interval, in seconds. Range from
60 to 3600.
- sanity-timer
seconds
- Sets the sanity timer, in seconds.
- shared-secret
password
- Sets the shared secret
password for the primary RADIUS server.
- threshold
percentage
- Sets the threshold percentage. Range from 10 to
90 percent.
- type
radius
radius-acct
- Sets the RADIUS type.
- zombie-period
seconds
- Sets the Zombie period in seconds. Range from 30
to 120.
Modes
Global configuration mode
Usage Guidelines
Use the no form of this command
without a RADIUS server name to disable the configuration for all configured RADIUS
servers.
Although you can configure the options
individually and some are optional, you must configure the following options to
create a basic RADIUS server configuration.
- ip
ip-address
- port
port-number
- shared-secret
password
Before you can configure the auto-fallback-disable command and the backup options, you
must enter the backup command without any options.
Examples
The following example shows how to
create a proxy AAA server configuration.
device# config
device(config)# radius-service rad01
device(config-radius-service)# backup
device(config-radius-service)# backup ip 10.10.2.3
device(config-radius-service)# backup port 4
device(config-radius-service)# backup shared-secret
Password: ***
Retype: ***
The following example disables
settings for all RADIUS server.
device# config
device(config)# no radius-service
Do you want to continue to delete (or input 'no' to cancel)? [yes/no] yes
History
| Release version |
Command history |
| 3.5.1 |
This command was updated. |