Table of Contents
Advertisement
Chapter 11
Configuring Portal-Based Authentication
Command
Step 5
radius-server attribute nas-port
format e
VVVVVVVVVVVVVVVVVVVVVV
VVVVVVVVVV
Step 6
radius-server host {hostname |
ip-address} auth-port port-number
acct-port port-number key string
Step 7
end
Step 8
show running-config
Step 9
copy running-config startup-config
To delete the specified RADIUS server, use the no radius-server host {hostname | ip-address} global
configuration command.
This example shows how to configure communication between the switch and the RADIUS server. This
configuration identifies the RADIUS server by its IP address 192.168.0.252, uses port 1645 as the
authorization port and port 1646 as the accounting port, and sets the encryption key to cisco:
Switch(config)# ip http server
Switch(config)# ip radius source-interface Vlan1
Switch(config)# radius-server attribute 8 include-in-access-req
Switch(config)# radius-server attribute nas-port format e
VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV
Switch(config)# radius-server host 192.168.0.252 auth-port 1645 acct-port 1646 key cisco
You can globally configure the timeout, retransmission, and encryption key values for all RADIUS
servers by using the radius-server host global configuration command. If you want to configure these
options on a per-server basis, use the radius-server timeout, radius-server retransmit, and the
radius-server key global configuration commands. For more information, see the
for All RADIUS Servers" section on page
You also need to configure some settings on the RADIUS server. These settings include the IP address
of the switch and the key string to be shared by both the server and the switch. For more information,
see the RADIUS server documentation.
OL-23389-01
Purpose
Set the NAS-Port format to be used for RADIUS accounting features.
Configure the RADIUS server parameters.
For hostname | ip-address, specify the hostname or IP address of the
remote RADIUS server.
For auth-port port-number, specify the UDP destination port for
authentication requests. The default is 1645. The range is 0 to 65536.
For acct-port port-number, specify the UDP destination port for
accounting requests. The default is 1646. The range is 0 to 65536.
For key string, specify the authentication and encryption key used
between the switch and the RADIUS daemon running on the RADIUS
server. The key is a text string that must match the encryption key used on
the RADIUS server.
Note
Always configure the key as the last item in the radius-server
host command syntax because leading spaces are ignored, but
spaces within and at the end of the key are used. If you use spaces
in the key, do not enclose the key in quotation marks unless the
quotation marks are part of the key. This key must match the
encryption used on the RADIUS daemon.
If you want to use multiple RADIUS servers, re-enter this command.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
8-29.
Catalyst 2928 Switch Software Configuration Guide
Configuring Portal-Based Authentication
"Configuring Settings
11-5
Advertisement
Table of Contents
Troubleshooting
