Chapter 4 Function/System Settings and Display
4.1 User Management > set radius
ETERNUS CLI User’s Guide
Copyright 2015 FUJITSU LIMITED
P2X0-1030-09ENZ0
373
set radius
This command sets up the RADIUS authentication server. A secondary server cannot be set up without setting
up a primary server. Set the secondary IP address to "0.0.0.0." to disable the secondary-server setting.
■
Syntax
■
Parameter
set radius -mode {enable | disable} [-after-error {internal | internal-net | no}]
[-primary-server
primary_server
] [-primary-port {maintenance | remote}]
[-primary-port-number
port_number
] [-primary-authentication-mode {chap | pap}]
[-primary-shared-secret
shared_secret_code
] [-primary-retry-timeout{10|20|30|40|50|60}]
[-secondary-server
secondary_server
] [-secondary-port {maintenance | remote}]
[-secondary-port-number
port_number
] [-secondary-authentication-mode {chap | pap}]
[-secondary-shared-secret
shared_secret_code
] [-secondary-retry-timeout{10|20|30|40|50|60}]
-mode
This parameter specifies enable or disable for RADIUS authentication, authorization and
accounts functions. To enable RADIUS authentication, the primary server must be set in
advance or at the same time that this parameter is set. RADIUS authentication can be disabled
regardless of the primary server setting status.
enable
RADIUS function is enabled.
disable
RADIUS function is disabled.
-after-error Optional. This parameter specifies what happens when an error occurs. If this parameter is
omitted, this setting is not changed.
internal
Authenticate and authorize for any error that occurs.
internal-net Authenticate and authorize for an error that occurs due to a network problem.
no
No authenticate and/or no authorize.
-primary-server
Optional. This parameter specifies the primary server. Only one server can be specified. If the
primary server is not set, specify the primary server for this parameter to enable RADIUS
authentication. The server name format should be IPv4 standard notation (a base 256
"d.d.d.d" string), IPv6 address format, or a fully qualified domain name (FQDN). The types of
IPv6 addresses that can be specified are global addresses (including 6to4 addresses), link local
addresses, and unique local addresses. Up to 63 alphanumeric characters can be specified.
Example: -primary-server 192.168.1.20
Example: -primary-server fd80::abd0:223:ad
Example: -primary-server foo.bar
Example: -primary-server "" (when deleting)
Summary of Contents for Eternus DX410 S2
Page 2: ...This page is intentionally left blank ...
Page 756: ......
