[no] radius
config>system>security
This command enables the context to configure RADIUS authentication on the 7705 SAR.
For redundancy, multiple server addresses can be configured for each 7705 SAR.
The no form of the command removes the RADIUS configuration.
access-algorithm {direct | round-robin}
[no] access-algorithm
config>system>security>radius
This command configures the algorithm used to access the set of RADIUS servers. Up to five servers can be configured.
In direct mode, the first server, as defined by the server command, is the primary server. This server is always used first when authenticating a request. In round-robin mode, the server used to authenticate a request is the next server in the list, following the last authentication request. For example, if server 1 is used to authenticate the first request, server 2 is used to authenticate the second request, and so on.
direct
first server is always used to authenticate a request
server used to authenticate a request is the next server in the list, following the last authentication request
[no] accounting
config>system>security>radius
This command enables RADIUS accounting. The no form of this command disables RADIUS accounting.
no accounting
accounting-port port
no accounting-port
config>system>security>radius
This command specifies a UDP port number on which to contact the RADIUS server for accounting requests.
specifies the UDP port number
[no] authorization
config>system>security>radius
This command configures RADIUS authorization parameters for the system.
The no form of this command disables RADIUS authorization for the system.
no authorization
port port
no port
config>system>security>radius
This command configures the TCP port number to contact the RADIUS server.
The no form of the command reverts to the default value.
1812 (as specified in RFC 2865, Remote Authentication Dial In User Service (RADIUS))
the TCP port number to contact the RADIUS server
retry count
no retry
config>system>security>radius
This command configures the number of times the router attempts to contact the RADIUS server for authentication if there are problems communicating with the server.
The no form of the command reverts to the default value.
3
the retry count
server server-index address ip-address secret key [hash | hash2]
no server server-index
config>system>security>radius
This command adds a RADIUS server and configures the RADIUS server IP address, index, and key values.
Up to five RADIUS servers can be configured at any one time. RADIUS servers are accessed in order from lowest to highest index for authentication requests until a response from a server is received. A higher-indexed server is only queried if no response is received from a lower-indexed server (which implies that the server is not available). If a response from a server is received, no other RADIUS servers are queried. It is assumed that there are multiple identical servers configured as backups and that the servers do not have redundant data.
The no form of the command removes the server from the configuration.
no RADIUS servers are configured
the index for the RADIUS server. The index determines the sequence in which the servers are queried for authentication requests. Servers are queried in order from lowest to highest index.
the IP address of the RADIUS server. Two RADIUS servers cannot have the same IP address. An error message is generated if the server address is a duplicate.
the secret key to access the RADIUS server. This secret key must match the password on the RADIUS server.
specifies that the key is entered in an encrypted form. If the hash parameter is not used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash parameter specified.
specifies that the key is entered in a more complex encrypted form. If the hash2 parameter is not used, the less encrypted hash form is assumed.
timeout seconds
no timeout
config>system>security>radius
This command configures the number of seconds the router waits for a response from a RADIUS server.
The no form of the command reverts to the default value.
3
the number of seconds the router waits for a response from a RADIUS server, expressed as a decimal integer
[no] use-default-template
config>system>security>radius
This command specifies whether the user template defined by this entry is to be actively applied to the RADIUS user.
no use-default-template