Cisco MDS 9000 Series Configuration Manual page 73
Security
Hide thumbs
Also See for MDS 9000 Series:
- Command reference manual (1464 pages) ,
- Configuration manual (344 pages) ,
- Troubleshooting manual (161 pages)
Table of Contents
Advertisement
Configuring Security Features on an External AAA Server
Specifies the preshared key for the selected RADIUS server. This key overrides the key assigned using the
radius-server key command. In this example, the host is 10.10.0.0 and the key is HostKey.
Step 3
switch(config)# radius-server host 10.10.0.0 auth-port 2003
Specifies the destination UDP port number to which the RADIUS authentication messages should be sent. In
this example, the host is 10.10.0.0 and the authentication port is 2003. The default authentication port is 1812,
and the valid range is 0 to 65366.
Step 4
switch(config)# radius-server host 10.10.0.0 acct-port 2004
Specifies the destination UDP port number to which RADIUS accounting messages should be sent. The default
accounting port is 1813, and the valid range is 0 to 65366.
Step 5
switch(config)# radius-server host 10.10.0.0 accounting
Specifies this server to be used only for accounting purposes.
Note
Step 6
switch(config)# radius-server host 10.10.0.0 key 0 abcd
Specifies a clear text key for the specified server. The key is restricted to 64 characters.
Step 7
switch(config)# radius-server host 10.10.0.0 key 4 da3Asda2ioyuoiuH
Specifies an encrypted key for the specified server. The key is restricted to 64 characters.
Setting the RADIUS Server IPv6 Address
To specify the host RADIUS server IPv6 address and other options, follow these steps:
Procedure
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# radius-server host 2001:0DB8:800:200C::417A Key HostKey
Specifies the preshared key for the selected RADIUS server. This key overrides the key assigned using the
radius-server key command. In this example, the host is 2001:0DB8:800:200C::417A and the key is HostKey.
Step 3
switch(config)# radius-server host 2001:0DB8:800:200C::417A auth-port 2003
Specifies the destination UDP port number to which the RADIUS authentication messages should be sent. In
this example, the host is 2001:0DB8:800:200C::417A and the authentication port is 2003. The default
authentication port is 1812, and the valid range is 0 to 65366.
Step 4
switch(config)# radius-server host 2001:0DB8:800:200C::417A acct-port 2004
Specifies the destination UDP port number to which RADIUS accounting messages should be sent. The default
accounting port is 1813, and the valid range is 0 to 65366.
If neither the authentication nor the accounting options are specified, the server is used for both
accounting and authentication purposes.
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
Setting the RADIUS Server IPv6 Address
55
Advertisement
Chapters
Table of Contents
