Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/switch/help/en-us/index.html?contextId=cli-network-services-RADIUS-server

Radius server

radius-server host

Command Objective: This command configures the RADIUS client with the parameters (host, timeout, key, retransmit).

Syntax:

  • radius-server host {ipv4-address | ipv6-address | host-name} [auth-port <integer(1-65535)>] [acct-port <integer(1-65535)>] [timeout <1-120>] [retransmit <1-254>] [key <secret-key-string>] [primary]
  • no radius-server host {ipv4-address | ipv6-address | host-name} [primary]

Parameter Description:

  • ipv4-address: Configures the IPv4 address of the RADIUS server host.
  • ipv6-address: Configures the IPv6 address of the RADIUS server host.
  • host-name: Configures the DNS (Domain Name System) name of the RADIUS server host. This feature has been included to adhere to the Industry Standard CLI syntax. This feature is currently not supported.
  • auth-port <integer(1-65535)>: Configures a specific UDP (User Datagram Protocol) destination port on this RADIUS server to be used solely for the authentication requests. The value of the auth port ranges between 1 and 65535.
  • acct-port <integer(1-65535)>: Configures a specific UDP destination port on this RADIUS to be solely used for accounting requests. The value of the auth port ranges between 1 and 65535.
  • timeout <1-120>: Configures the time period in seconds for which a client waits for a response from the server before re-transmitting the request. The value of the time out in ranges between 1 to 120 in seconds.
  • retransmit <1-254>: Configures the maximum number of attempts the client undertakes to contact the server. The value number of retransmit attempts ranges between 1 and 254.
  • key <secret-key-string>: Configures the Per-server encryption key which specifies the authentication and encryption key for all RADIUS communications between the authenticator and the RADIUS server. The value of the maximum length of the secret key string is 46.
  • primary: Sets the RADIUS server as the primary server. Only one server can be configured as the primary server, any existing primary server will be replaced, when the command is executed with this option.

Mode: Global Configuration Mode.

show radius server

Command Objective: This command displays RADIUS server Host information which contains, Index, Server address, Shared secret, Radius Server status, Response Time, Maximum Retransmission, Authentication Port and Accounting Port.

Syntax: show radius server [{<ucast_addr> | <ip6_addr> | <string>}]

Parameter Description:

  • <ucast_addr>: Displays the related information of the specified unicast address of the RADIUS server host.
  • <ip6_addr>: Displays the related information of the specified IPv6 address of the RADIUS server host.
  • <string>: Displays the name of the RADIUS server host. This maximum value of the string is of size 32.

Mode: Privileged EXEC Mode.

show radius statistics

Command Objective: This command displays RADIUS Server Statistics for the data transfer between server and the client from the time of initiation.

Syntax: show radius statistics

Mode: Privileged EXEC Mode.