488 | Securityw w w . d e l l . c o m | s u p p o r t . d e l l . c o m To specify a RADIUS server host and configure its communication parameters, use the followingcommand in CONFIGURATION mode:To specify multiple RADIUS server hosts, configure the radius-server host command multiple times. If youconfigure multiple RADIUS server hosts, FTOS attempts to connect with them in the order in which theywere configured. When FTOS attempts to authenticate a user, the software connects with the RADIUSserver hosts one at a time, until a RADIUS server host responds with an accept or reject response.If you want to change an optional parameter setting for a specific host, use the radius-server host command.To change the global communication settings to all RADIUS server hosts, refer to Set the GlobalCommunication Parameters for all RADIUS Server Hosts.To view the RADIUS configuration, use the show running-config radius command in EXEC Privilege mode.To delete a RADIUS server host, use the no radius-server host {hostname | ip-address} command.Set the Global Communication Parameters for all RADIUS Server HostsYou can configure global communication parameters (auth-port, key, retransmit, and timeout parameters)and specific host communication parameters on the same system. However, if you configure both globaland specific host parameters, the specific host parameters override the global parameters for that RADIUSserver host.To set global communication parameters for all RADIUS server hosts, use any or all of the followingcommands in CONFIGURATION mode:Command Syntax Command Mode Purposeradius-server host {hostname |ip-address} [auth-port port-number][retransmit retries] [timeout seconds][key [encryption-type] key]CONFIGURATION Enter the host name or IP address of the RADIUS serverhost. Configure the optional communication parametersfor the specific host:• auth-port port-number range: 0 to 65335. Enter aUDP port number. The default is 1812.• retransmit retries range: 0 to 100. Default is 3.• timeout seconds range: 0 to 1000. Default is 5seconds.• key [encryption-type] key: Enter 0 for plain text or 7for encrypted text, and a string for the key. The keycan be up to 42 characters long. This key must matchthe key configured on the RADIUS server host.If you do not configure these optional parameters, theglobal default values for all RADIUS host are applied.Command Syntax Command Mode Purposeradius-server deadtime seconds CONFIGURATION Set a time interval after which a RADIUS hostserver is declared dead.• seconds range: 0 to 2147483647.Default: 0 seconds
