Support User Manuals

Enterasys Networks XSR CLI Router User Manual

Open as PDF

of 684

AAA Method Commands

16-102 Configuring Security

• client‐ConfiguresthedefaultAAAmethod(plug‐in)forea chclientservice.Referto

page16‐106forthecommanddefinition.

•

enable - EnablesthecurrentAAAserverforRADIUS.Refertopage16‐106forthe

commanddefinition.

•

group - Specifiesthenameofanexistinggroup.Refertopage16‐107forthecommand

definition.

•

hash enable - Enablesthehashalgorithmusedfor RADIUS.Refertopage16‐108forthe

commanddefinition.

•

key - SetstheauthenticationandencryptionkeyusedbetweentheXSRandtheserver

daemonrunningonaRADIUSserver.Refertopage16‐108forthecommanddefinition.

•

qtimeout - Specifiesthequeuetimeout.Refertopage16‐109forthecommanddefinition.

•

retransmit - SpecifiesthenumberofAAARADIUSserverrequestssenttoaserver.Refer

topage16‐109

forthecommanddefinition.

•

timeout - SetstheintervaltheXSRwaitsfortheAAARADIUSservertoreplybefore

retransmitting.Refertopage16‐110forthecommanddefinition.

Syntax

aaa method {local | radius | pki} method-name [default]

Syntax of the “no” Form

UsethenoformtodeletetheAAAmethodandrestorethedefault:

no aaa method {local | radius | pki} method-name

Default

Ifthedefaultisnotspecified,thelocalmethodisthedefaultforAAAserviceandsubsystems

lackingtheirowndefault.

Mode

Globalconfiguration:XSR(config)#

Next Mode

AAAMethodconfiguration:XSR(aaa-method-xx)#

Example

ThisexamplesetsRADIUSmethodsbrasthedefaultforAAAservice:

XSR(config)#aaa method radius sbr default

local

LocalAAAmethod.

radius

RADIUSmethod.YoumustsetaRADIUSservertype.

pki

PKImethod.

method-name

DesignationoftheAAAmethod(plug‐in).

default

Ifthekeywordisset,themethodisDEFAULT,unlessoverriddenona

per‐servicebasisbythe

clientsub‐command.

previous next