Radius Server Group

This procedure will Edit or Display Remote Authentication Dial In User Service (RADIUS) Server Group attributes for a network element (ne).

Edit Radius Profile

Note 1: + select one parameter from list. Note 2: **ne - Substitute olt for ne for the OLT2> on the CLI command path

There are some pre-created default profiles. For example, dot1xdefault is used for all 802.1x UNI port radius authentication unless the user assigns another RADIUS profile. The local craft profile (found in EMS security panel. RADIUS profiles can be assigned on a per port granularity allowing different authenticators for different UNI ports.

The Server entries are user generated RADIUS profiles. 

• Command Path - >ne radius-server-group edit
• Command Path - >olt radius-server-group edit
• Action - 
  • Edit - one or more server entries.
    • + dot1x-default - Modify 802.1x authentication default group
    • + login-default - Modify craft login default group
    • Server - Add or remove a RADIUS server (remove using ‘no server’) 
      • + host - RADIUS server Hostname 
      • + ip - RADIUS server IP address
      • shared-KEY - Shared secret key for authentication with specified RADIUS server. 

1. From the ESUx> command line, input **ne radius-server-group edit dot1x-default server host=servertest shared-KEY=password, and press Enter. Output similar to the following is displayed:

   ESUx> **ne radius-server-group edit dot1x-default server host=server geo-test shared-KEY=password <enter> completed ESUx> _

Show Radius Profile

Attributes for showing a Radius profile.

• Command Path - >ne radius-server-group show
• Command Path - >olt radius-server-group show
• Action -
  • Show - one or more server entries.
    • + dot1x-default - Modify 802.1x authentication default group
    • + login-default - Modify craft login default group

1. From the ESUx command line, input **ne radius-server-group show dot1x-default, and press Enter. Output similar to the following is displayed: