Cisco CISCO1401 Software Guide - Page 145

Chapter 11 Configuring RADIUS and TACACS+ Servers Configuring and Enabling RADIUS Beginning in privileged EXEC mode, follow these steps to specify a vendor-proprietary RADIUS server host and a shared secret text string: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Command configure terminal radius-server host {hostname | ip-address} non-standard radius-server key string end show running-config copy running-config startup-config Purpose Enter global configuration mode. Specify the IP address or host name of the remote RADIUS server host and identify that it is using a vendor-proprietary implementation of RADIUS. Specify the shared secret text string used between the bridge and the vendor-proprietary RADIUS server. The bridge and the RADIUS server use this text string to encrypt passwords and exchange responses. Note The key is a text string that must match the encryption key used on the RADIUS server. Leading spaces are ignored, but spaces within and at the end of the key are used. If you use spaces in your key, do not enclose the key in quotation marks unless the quotation marks are part of the key. Return to privileged EXEC mode. Verify your settings. (Optional) Save your entries in the configuration file. To delete the vendor-proprietary RADIUS host, use the no radius-server host {hostname | ip-address} non-standard global configuration command. To disable the key, use the no radius-server key global configuration command. This example shows how to specify a vendor-proprietary RADIUS host and to use a secret key of rad124 between the bridge and the server: BR(config)# radius-server host 172.20.30.15 nonstandard BR(config)# radius-server key rad124 Displaying the RADIUS Configuration To display the RADIUS configuration, use the show running-config privileged EXEC command. OL-4059-01 Cisco Aironet 1400 Series Wireless Bridges Software Configuration Guide 11-15