Use the radius-server host global configuration command to specify a RADIUS server host. To delete the specified RADIUS host, use the no form of this command.
auth-port-number—Port number for authentication requests. The host is not used for authentication if set to 0. If unspecified, the port number defaults to 1645 (Range: 0-65535).
timeout—Specifies the timeout value in seconds. If no timeout value is specified, the global value is used (Range: 1-30).
retries—Specifies the re-transmit value. If no re-transmit value is specified, the global value is used (Range: 1-10).
deadtime—Length of time, in minutes, for which a RADIUS server is skipped over by transaction requests (Range 0-2000).
key-string—Specifies the authentication and encryption key for all RADIUS communications between the device and the RADIUS server. This key must match the encryption used on the RADIUS daemon. If no key value is specified, the global value is used.
source—Specifies the source IP address to use for the communication. If no retransmit value is specified, the global value is used.
priority—Determines the order in which the servers are used, where 0 is the highest priority (Range: 0-65535).
Default Configuration
If no RADIUS host is specified, the global radius-server command values are used as the default.
Command Mode
Global Configuration Mode
User Guidelines
To specify multiple hosts, multiple radius-server host commands can be used.
If no host-specific timeout, retransmit, deadtime or key values are specified, the global values apply to each host.
Examples
The following example specifies a RADIUS server host with the following characteristics:
The radius-server key global configuration command sets the authentication and encryption key for all RADIUS communications between the device and the RADIUS daemon. To reset to the default, use the no form of this command.
Syntax
radius-server keykey-string
no radius-server key
key-string—Specifies the authentication and encryption key for all RADIUS communications between the device and the RADIUS server. This key must match the encryption used on the RADIUS daemon. The key can be up to 160 characters long.
Default Configuration
The default is an empty string.
Command Mode
Global Configuration Mode
User Guidelines
There are no user guidelines for this command.
Examples
The following example sets the authentication and encryption key for all RADIUS communications between the device and the RADIUS daemon to dell-server.
Console (config)# radius-server key dell-server
radius-server retransmit
Use the radius-server retransmit global configuration command to specify the number of times the software searches the list of RADIUS server hosts. To reset the default configuration, use the no form of this command.
Syntax
radius-server retransmitretries
no radius-server retransmit
retries—Specifies the retransmit value (Range: 1-10).
Default Configuration
The default is 3 attempts.
Command Mode
Global Configuration Mode
User Guidelines
There are no user guidelines for this command.
Examples
The following example configures the number of times the software searches the list of RADIUS server hosts (5 attempts).
Console (config)# radius-server retransmit 5
radius-server source-ip
Use the radius-server source-ip global configuration command to specify the source IP address used for communication with RADIUS servers. To return to the default, use the no form of this command.
Syntax
radius-server source-ipsource
no radius-server-ip
source—Specifies the source IP address.
Default Configuration
The default IP address is the outgoing IP interface.
Command Mode
Global Configuration Mode
User Guidelines
There are no user guidelines for this command.
Examples
The following example configures the source IP address used for communication with RADIUS servers.
Use the radius-server timeout global configuration command to set the interval for which a device waits for a server host to reply. To restore the default, use the no form of this command.
Syntax
radius-server timeouttimeout
no radius-server timeout
timeout—Specifies the timeout value in seconds (Range: 1-30).
Default Configuration
The default value is 3 seconds.
Command Mode
Global Configuration Mode
User Guidelines
There are no user guidelines for this command.
Examples
The following example sets the interval for which a device waits for a server host to reply.
Console (config)# radius-server timeout 5
radius-server deadtime
Use the radius-server deadtime global configuration command to improve RADIUS response times when servers are unavailable. The command is used to cause the unavailable servers to be skipped. To reset the default value, use the no form of this command.
Syntax
radius-server deadtimedeadtime
no radius-server deadtime
deadtime—Length of time in minutes, for which a RADIUS server is skipped over by transaction requests (Range: 0-2000).
Default Configuration
The default dead time is 0 minutes.
Command Mode
Global Configuration Mode
User Guidelines
There are no user guidelines for this command.
Examples
The following example sets a dead time where a RADIUS server is skipped over by transaction requests.
Console (config)# radius-server deadtime 10
show radius-servers
Use the show radius-servers privileged EXEC command to display the RADIUS server settings.
Syntax
show radius-servers
Default Configuration
This command has no default configuration.
Command Mode
Privileged EXEC Mode
User Guidelines
There are no user guidelines for this command.
Examples
The following example displays the RADIUS server settings.
Console# show radius-servers
Port
IP address Auth Acct TimeOut Retransmit deadtime source IP Priority
