Configuring RADIUS Servers
Configuring RADIUS Servers in Gaia Portal
|
Important - On Scalable Platforms (Maestro and Chassis), you must connect to the Gaia Portal |
![Closed](transparent.gif)
Step |
Instructions |
||
---|---|---|---|
1 |
In the navigation tree, click User Management > Authentication Servers. |
||
2 |
In the RADIUS Servers section, click Add. |
||
3 |
Enter the RADIUS Server parameters:
|
||
4 |
Click OK. |
||
5 |
Optional: Select the Network Access Server (NAS) IP address. This setting applies to all configured RADIUS servers. This parameter records the IP address, from which Gaia sends the RADIUS packet. This IP address is stored in the RADIUS packet, even when the packet goes through NAT, or some other address translation that changes the source IP address of the packet. The "NAS-IP-Address" is defined in RFC 2865. If no NAS IP Address is chosen, the IPv4 address of the Gaia Management Interface |
||
6 |
Optional: Select RADIUS Users Default Shell (for details about the shells, see Users). This setting applies to all configured RADIUS servers. |
||
7 |
Optional: Select the Super User ID - 0 or 96. This setting applies to all configured RADIUS servers. If the UID is 0, there is no need to run the |
||
8 |
Click Apply. |
![Closed](transparent.gif)
Step |
Instructions |
---|---|
1 |
In the navigation tree, click User Management > Authentication Servers. |
2 |
Select the RADIUS server. |
3 |
Click Edit. |
4 |
You can edit only the Host, UDP Port, Shared secret, and Timeout. |
5 |
Click OK. |
![Closed](transparent.gif)
Step |
Instructions |
---|---|
1 |
In the navigation tree, click User Management > Authentication Servers. |
2 |
Select the RADIUS server. |
3 |
Click Delete. |
4 |
Click OK to confirm. |
Configuring RADIUS Servers in Gaia Clish
|
Important - On Scalable Platforms (Maestro and Chassis), you must run the applicable commands in Gaia gClish of the applicable Security Group. |
Description
Use the "aaa radius-servers
" commands to add, configure, and delete RADIUS authentication servers.
Syntax
![Closed](transparent.gif)
add aaa radius-servers priority <Priority> host <Hostname, or IP Address of RADIUS Server> [port <1-65535>] prompt-secret timeout <1-50> secret <Shared Secret> timeout <1-50> |
![Closed](transparent.gif)
set aaa radius-servers priority <Priority> host <Hostname, or IP Address of RADIUS Server> new-priority <New Priority> port <1-65535> prompt-secret secret <Shared Secret> timeout <1-50> |
![Closed](transparent.gif)
set aaa radius-servers NAS-IP<SPACE><TAB> default-shell<SPACE><TAB> super-user-uid <0 | 96> |
![Closed](transparent.gif)
|
![Closed](transparent.gif)
show aaa radius-servers priority <Priority> host port timeout |
![Closed](transparent.gif)
show aaa radius-servers NAS-IP default-shell super-user-uid |
![Closed](transparent.gif)
delete aaa radius-servers priority <Priority> |
![Closed](transparent.gif)
delete aaa radius-servers NAS-IP |
|
Important - After you add, configure, or delete features, run the " |
Parameters
![Closed](transparent.gif)
Parameter |
Description |
||
---|---|---|---|
|
Configures the RADIUS server priority. Enter an integer between -999 and 999 (default is 0). When there two or more configured RADIUS servers, Gaia connects to the RADIUS server with the highest priority. Low numbers have the higher priority. |
||
|
Configures the new priority for the RADIUS server. |
||
|
Configures the Host name or IP address (IPv4 or IPv6) of RADIUS server. |
||
|
Configures the UDP port used on RADIUS server. The default port is 1812 as specified by the RADIUS standard. The range of valid port numbers is from 1 to 65535. Port 1645 is non-standard, but is commonly used as alternative to port 1812.
|
||
|
The system will prompt you to enter the Shared Secret. |
||
|
Configures the shared secret used for authentication between the RADIUS server and the Gaia. Enter the shared secret text string up to 256 characters, without any whitespace characters and without a backslash. Make sure that the shared string defined on the Gaia matches the shared string defined on the RADIUS server. RFC 2865 recommends that the secret be at least 16 characters in length. Some RADIUS servers have a maximum string length for shared secret of 15 or 16 characters. See the documentation for your RADIUS server. |
||
|
Configures the timeout in seconds (from 1 to 5), during which Gaia waits for the RADIUS server to respond. The default value is 3. If there is no response after the configured timeout, Gaia tries to connect to a different configured RADIUS server. Set this timeout, so that the sum of all RADIUS server timeouts is less than 50. |
||
|
Optional: Configures the default shell for RADIUS Users (for details about the shells, see Users). |
||
|
Optional: Configures the UID for the RADIUS super user. If the UID is 0, there is no need to run the |
||
|
Optional: This parameter records the IP address, from which Gaia sends the RADIUS packet. This IP address is stored in the RADIUS packet, even when the packet goes through NAT, or some other address translation that changes the source IP address of the packet. The "NAS-IP-Address" is defined in RFC2865. If no NAS IP Address is chosen, the IPv4 address of the Gaia Management Interface is used (run the " |