Number of Configured Authentication Servers

The number of RADIUS authentication servers configured on the system. The value can range from 0 to 32.

Number of Configured Accounting Servers

The number of RADIUS accounting servers configured on the system. The value can range from 0 to 32.

Number of Named Authentication Server Groups

The number of authentication server groups configured on the system. An authentication server group contains one or more configured authentication servers that share the same RADIUS server name.

Number of Named Accounting Server Groups

The number of accounting server groups configured on the system. An accounting server group contains one or more configured authentication servers that share the same RADIUS server name.

Max Number of Retransmits

The value of the maximum number of times a request packet is retransmitted. The valid range is 1-15. Consideration to maximum delay time should be given when configuring RADIUS max retransmit and RADIUS timeout. If multiple RADIUS servers are configured, the max retransmit value on each will be exhausted before the next server is attempted. A retransmit will not occur until the configured timeout value on that server has passed without a response from the RADIUS server. Therefore, the maximum delay in receiving a response from the RADIUS application equals the sum of (retransmit times timeout) for all configured servers. If the RADIUS request was generated by a user login attempt, all user interfaces will be blocked until the RADIUS application returns a response.

Timeout Duration (secs)

The timeout value, in seconds, for request retransmissions. The valid range is 1 - 30. See the Max Number of Retransmits field description for more information about configuring the timeout duration.

Accounting Mode

Use the menu to select whether the RADIUS accounting mode is enabled or disabled on the current server.

Enable RADIUS Attribute 4 (NAS-IP Address

Select the check box to allow the switch to include the network access server (NAS) IP address in Access-Request packets.

NAS-IP Address

Enter the IP address of the NAS. This field can be edited only when the Enable RADIUS Attribute 4 field is selected. The address should be unique to the NAS within the scope of the RADIUS server. The NAS IP address is only used in Access-Request packets.

RADIUS Server Host Address

To configure a new RADIUS server, select the Add option from the menu. To view or configure a RADIUS server that is already configured on the system, select its IP address from the menu.

Host Address

Enter the IP address of the RADIUS server to add. This field is only available when Add is selected in the RADIUS Server Host Address field.

RADIUS Server Name

Enter the name of the RADIUS server. The name can contain up to 31 alphanumeric characters. Spaces, hyphens, and underscores are also permitted. If you do not assign a name, the server is assigned the default name Default-RADIUS-Server. You can use the same name for multiple RADIUS Authentication servers. RADIUS clients can use RADIUS servers with the same name as backups for each other.

RADIUS Server Host Address

Use the drop-down menu to select the IP address of the RADIUS server to view or configure. Select Add to configure additional RADIUS servers.

Port

Identifies the authentication port the server uses to verify the RADIUS server authentication. The port is a UDP port, and the valid range is 1‐65535. The default port for RADIUS authentication is 1812.

Secret

Shared secret text string used for authenticating and encrypting all RADIUS communications between the device and the RADIUS server. This secret must match the RADIUS encryption.

Apply

The Secret will only be applied if this box is checked. If the box is not checked, anything entered in the Secret field will have no affect and will not be retained. This field is only displayed if the user has READWRITE access.

Primary Server

Sets the selected server to the Primary (Yes) or Secondary (No) server. If you configure multiple RADIUS servers with the same RADIUS Server Name, designate one server as the primary and the other(s) as the backup server(s). The switch attempts to use the primary server first, and if the primary server does not respond, the switch attempts to use one of the backup servers with the same RADIUS Server Name.

Message Authenticator

Enable or disable the message authenticator attribute for the selected server.

Secret Configured

Indicates whether the shared secret for this server has been configured.

Current

Indicates whether the selected RADIUS server is the current server (Yes) or a backup server (No).

If more than one RADIUS server is configured with the same name, the switch selects one of the servers to be the current server from the group of servers with the same name.

When the switch sends a RADIUS request to the named server, the request is directed to the server selected as the current server. Initially the primary server is selected as the current server. If the primary server fails, one of the other servers becomes the current server. If the primary server is not configured, the current server is the most recently configured RADIUS server.

RADIUS Server Name

Shows the RADIUS server name.

To change the name, enter up to 31 alphanumeric characters. Spaces, hyphens, and underscores are also permitted. If you do not assign a name, the server is assigned the default name Default‐RADIUS‐Server.

You can use the same name for multiple RADIUS Authentication servers. RADIUS clients can use RADIUS servers with the same name as backups for each other.

Current

An asterisk (*) in the column indicates that the server is the current server for the authentication server group. If no asterisk is present, the server is a backup server.

If more than one RADIUS server is configured with the same name, the switch selects one of the servers to be the current server from the group of servers with the same name.

When the switch sends a RADIUS request to the named server, the request is directed to the server selected as the current server. Initially the primary server is selected as the current server. If the primary server fails, one of the other servers becomes the current server.

RADIUS Server Host Address

Shows the IP address of the RADIUS server.

RADIUS Server Name

Shows the RADIUS server name. Multiple RADIUS servers can have the same name. In this case, RADIUS clients can use RADIUS servers with the same name as backups for each other.

Port Number

Identifies the authentication port the server uses to verify the RADIUS server authentication. The port is a UDP port.

Server Type

Shows whether the server is a Primary or Secondary server.

Secret Configured

Indicates whether the shared secret for this server has been configured.

Message Authenticator

Shows whether the message authenticator attribute for the selected server is enabled or disabled.

RADIUS Server Host Address

Use the drop-down menu to select the IP address of the RADIUS server for which to display statistics.

Round Trip Time (secs)

The time interval, in hundredths of a second, between the most recent Access- Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server.

Access Requests

The number of RADIUS Access-Request packets sent to this server. This number does not include retransmissions.

Access Retransmissions

The number of RADIUS Access-Request packets retransmitted to this server.

Access Accepts

The number of RADIUS Access-Accept packets, including both valid and invalid packets that were received from this server.

Access Rejects

The number of RADIUS Access-Reject packets, including both valid and invalid packets that were received from this server.

Access Challenges

The number of RADIUS Access-Challenge packets, including both valid and invalid packets that were received from this server.

Malformed Access Responses

The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or signature attributes or unknown types are not included as malformed access-responses.

Bad Authenticators

The number of RADIUS Access-Response packets containing invalid authenticators or signature attributes received from this server.

Pending Requests

The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response.

Timeouts

The number of authentication timeouts to this server.

Unknown Types

The number of RADIUS packets of unknown type which were received from this server on the authentication port.

Packets Dropped

The number of RADIUS packets received from this server on the authentication port and dropped for some other reason.

Accounting Server Host Address

To configure a new RADIUS accounting server, select the Add option from the menu. To view or configure an accounting server that is already configured on the system, select its IP address from the menu.

Host Address

Enter the IP address of the RADIUS accounting server to add. This field is only available when Add is selected in the Accounting Server Host Address field.

RADIUS Accounting Server Name

Enter a name for the RADIUS accounting server. The name can contain up to 31 alphanumeric characters. Spaces, hyphens, and underscores are also permitted. If you do not assign a name, the server is assigned the default name Default-RADIUS-Server. You can use the same name for multiple RADIUS accounting servers. RADIUS clients can use accounting servers with the same name as backups for each other.

Accounting Server Host Address

Use the drop-down menu to select the IP address of the accounting server to view or configure. Select Add to configure additional RADIUS servers.

Port

Identifies the authentication port the server uses to verify the RADIUS accounting server authentication. The port is a UDP port, and the valid range is 1-65535. The default port for RADIUS accounting is 1813.

Secret

Specifies the shared secret to use with the specified accounting server. This field is only displayed if you are logged into the switch with READWRITE access.

Apply

The Secret will only be applied if this box is checked. If the box is not checked, anything entered in the Secret field will have no affect and will not be retained. This field is only displayed if you are logged into the switch with READWRITE access.

Secret Configured

Indicates whether the shared secret for this server has been configured.

RADIUS Accounting Server Name

Enter the name of the RADIUS accounting server.

The name can contain up to 31 alphanumeric characters. Spaces, hyphens, and underscores are also permitted. If you do not assign a name, the server is assigned the default name Default-RADIUS-Server.

You can use the same name for multiple RADIUS accounting servers. RADIUS clients can use accounting servers with the same name as backups for each other.

RADIUS Accounting Server Name

Shows the RADIUS accounting server name. Multiple RADIUS accounting servers can have the same name. In this case, RADIUS clients can use RADIUS servers with the same name as backups for each other.

IP Address

Shows the IP address of the RADIUS server.

Port Number

Identifies the authentication port the server uses to verify the RADIUS server authentication. The port is a UDP port.

Secret Configured

Indicates whether the shared secret for this server has been configured.

Accounting Server Host Address

Use the drop-down menu to select the IP address of the RADIUS accounting server for which to display statistics.

Round Trip Time (secs)

Displays the time interval, in hundredths of a second, between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.

Accounting Requests

The number of RADIUS Accounting-Request packets sent to this server. This number does not include retransmissions.

Accounting Retransmissions

The number of RADIUS Accounting-Request packets retransmitted to this server.

Accounting Responses

Displays the number of RADIUS packets received on the accounting port from this server.

Malformed Access Responses

Displays the number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses.

Bad Authenticators

Displays the number of RADIUS Accounting-Response packets that contained invalid authenticators received from this accounting server.

Pending Requests

The number of RADIUS Accounting-Request packets destined for this server that have not yet timed out or received a response.

Timeouts

The number of accounting timeouts to this server.

Unknown Types

The number of RADIUS packets of unknown type which were received from this server on the accounting port.

Packets Dropped

The number of RADIUS packets received from this server on the accounting port and dropped for some other reason.