Dell PowerSwitch S5212F-ON EMC SmartFabric OS10 User Guide Release 10.5.1 - Page 445

Supported Releases 10.2.0E or later RADIUS server commands radius-server host Configures a RADIUS server and the key used to authenticate the switch on the server. Syntax Parameters radius-server host {hostname | ip-address} key {0 authentication-key | 9 authentication-key | authentication-key} [auth-port port-number] ● hostname - Enter the host name of the RADIUS server. ● ip-address - Enter the IPv4 (A.B.C.D) or IPv6 (x:x:x:x::x) address of the RADIUS server. ● key 0 authentication-key - Enter an authentication key in plain text. A maximum of 42 characters. ● key 9 authentication-key - Enter an authentication key in encrypted format. A maximum of 128 characters. ● authentication-key - Enter an authentication in plain text. A maximum of 42 characters. It is not necessary to enter 0 before the key. ● auth-port port-number - (Optional) Enter the UDP port number used on the server for authentication, from 1 to 65535, default 1812. Default Command Mode Usage Information Example Not configured CONFIGURATION The authentication key must match the key configured on the RADIUS server. You cannot enter spaces in the key. The show running-configuration output displays both unencrypted and encrypted keys in encrypted format. Configure global settings for the timeout and retransmit attempts allowed on RADIUS servers using the radius-server retransmit and radius-server timeout commands. Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S). Also supported in SmartFabric mode starting in release 10.5.0.1. The no version of this command removes a RADIUS server configuration. OS10(config)# radius-server host 1.5.6.4 key secret1 Supported Releases 10.2.0E or later radius-server host tls Configures a RADIUS server for RADIUS over TLS user authentication and secure communication. For RADIUS over TLS authentication, the radsec shared key and a security profile that uses an X.509v3 certificate are required. Syntax Parameters radius-server host {hostname | ip-address} tls security-profile profilename [auth-port tcp-port-number] key {0 authentication-key | 9 authentication-key | authentication-key} ● hostname - Enter the host name of the RADIUS server. ● ip-address - Enter the IPv4 (A.B.C.D) or IPv6 (x:x:x:x::x) address of the RADIUS server. ● tls - Enter tls to secure RADIUS server communication using the TLS protocol. ● security-profile profile-name - Enter the name of an X.509v3 security profile to use with RADIUS over TLS authentication. To configure a security profile for an OS10 application, see Security profiles. ● auth-port tcp-port-number - (Optional) Enter the TCP port number that the server uses for authentication. The range is from 1 to 65535. The default is 2083. Layer 2 445