Skip to content

RADIUS Configuration

[Command] show radius global

[Purpose] Display terminal RADIUS configuration information.

[View] System view

[Use Cases]

sonic# show radius global
RADIUS_SERVER address 192.168.15.168
priority 1
auth_port 1812
passkey ******

[Command] show radius server {all | ip-address}

[Purpose] Display radius server configuration

[View] System view

[Use Cases]

Terminal window
sonic# show radius server all
+-------------+-------------+-------------+------------+-----------+--------------+--------------+-------+------------+
| Server | Auth Port | Auth Type | Priority | Timeout | Retransmit | Passkey | Vrf | Src Intf |
+=============+=============+=============+============+===========+==============+==============+=======+============+
| 192.168.0.1 | 1812 | chap | 53 | 5 | 3 | mytesting123 | | |
+-------------+-------------+-------------+------------+-----------+--------------+--------------+-------+------------+
sonic#

[Command] radius global [auth-type {pap|chap|mschapv2}] [passkey passkey] [src-ip src-ip] [nas-ip nas-ip] [timeout timeout] [retransmit retransmit]

[Purpose] Configure authentication parameters for the RADIUS server.

[Parameter]

ParameterDescription
*password *Radius server shared key
src_ipSource IP for authentication message
nas-ipNAS IP address
timeoutValue range is 1-60s
retransmitMaximum number of retransmissions after an authentication request times out

[View] System Configuration View

[Use Cases]

sonic(config)# radius global auth-type pap
sonic(config)# radius global passket test_passwd

[Command] radius server server-ip [passkey passkey] [auth-port auth-port] [auth-type auth-type] [priority priority] [timeout timeout] [retransmit retransmit] [vrf vrf_name] [src-intf src-intf]

[Purpose] Configure radius server.

[Parameter]

ParameterDescription
*server-ip *radius server ip address
passkeyradius server shared secret
auth-portradius server port number, 1-65535
auth-typechoose from pap/chap/mschapv2
priorityserver priority. It is useful when there are multiple radius servers configured, 1-64
*timeout *Value range: 1-60 seconds
*retransmit *retry times, 0-10
*vrf_name *vrf name specified for src-intf
src-intfsource interface, which interface is used to send authentication packet to server

[View] System configuration view

[Comment] Max 8 servers can be specified.

[Use Cases]

Terminal window
sonic(config)# radius server 192.168.0.1 priority 53 auth-type chap passkey mytesting123