NEC N8406-022A Reference Manual

Also see for N8406-022A: Application guide

Contents

NEC N8406-022A Reference Manual Manual pdf 65 page image

Command Line Interface 65RADIUS server configurationCommand: /cfg/sys/radius[RADIUS Server Menu]prisrv - Set primary RADIUS server addresssecsrv - Set secondary RADIUS server addresssecret - Set primary RADIUS server secretsecret2 - Set secondary RADIUS server secretport - Set RADIUS portretries - Set RADIUS server retriestimeout - Set RADIUS server timeoutbckdoor - Enable/disable RADIUS backdoor for telnet/ssh/http/httpssecbd - Enable/disable RADIUS secure backdoor for telnet/ssh/http/httpson - Turn RADIUS authentication ONoff - Turn RADIUS authentication OFFcur - Display current RADIUS configurationNOTE: See the Application Guide for information on RADIUS.The following table describes the RADIUS Server Configuration Menu options.Table 61 RADIUS Server Configuration Menu optionsCommand Descriptionprisrv <IP address> Sets the primary RADIUS server address.secsrv <IP address> Sets the secondary RADIUS server address.secret <1-32 characters> This is the shared secret between the switch and the RADIUSserver(s).secret2 <1-32 characters> This is the secondary shared secret between the switch and theRADIUS server(s).port <UDP port number> Enter the number of the User Datagram Protocol (UDP) port to beconfigured, between 1500-3000. The default is 1645.retries <1-3> Sets the number of failed authentication requests before switching to adifferent RADIUS server. The range is 1-3 requests The default is 3requests.timeout <1-10> Sets the amount of time, in seconds, before a RADIUS serverauthentication attempt is considered to have failed. The range is 1-10seconds. The default is 3 seconds.bckdoor enable|disable Enables or disables the RADIUS back door for telnet/SSH/HTTP/HTTPS. The default value is disabled. This command does notapply when secure backdoor (secbd) is enabled.secbd enable|disable Enables or disables the RADIUS back door using secure password fortelnet/SSH/ HTTP/HTTPS. The default value is disabled. Thiscommand does not apply when backdoor (bckdoor) is enabled.on Enables the RADIUS server.off Disables the RADIUS server. This is the default.cur Displays the current RADIUS server parameters.IMPORTANT: If RADIUS is enabled, you must login using RADIUS authentication when connecting via theconsole or Telnet/SSH/HTTP/HTTPS. Backdoor for console is always enabled, so you can connect usingnoradius and the administrator password even if the backdoor (bckdoor) or secure backdoor (secbd) aredisabled.If backdoor is enabled (bckdoor ena), type in noradius as a backdoor to bypass RADIUS checking, anduse the administrator password to log into the switch. The switch allows this even if RADIUS servers areavailable.If secure backdoor is enabled (secbd ena), type in noradius as a backdoor to bypass RADIUS checking,and use the administrator password to log into the switch. The switch allows this only if RADIUS servers arenot available.