User Administration Server RADIUS

Display information about the configuration of the Sun Secure Application Switch interface for RADIUS authentication.

Access mode

exec

Syntax

show switchServices userAdministration server radius

Output Description

Heading Description Filter
Index Numeric index for server entries.

Valid values are from 1 to 10. 		index integer
IP Address The IP address of the RADIUS server that you want the system to use for authentication, authorization, or accounting. ipAddress ipAddress
Server Display Name A textual name that identifies the RADIUS server for event reporting purposes. The server name must be 32 or fewer characters. The system does not use this name for DNS lookup purposes, but you can use the same name. serverDisplayName text
Authentication Port The number of the UDP port that the RADIUS server uses for authentication and authorization requests.

Valid values are from 1 to 65535. 		udpPortAuthentication integer
Authorization Port The number of the UDP port that the RADIUS server uses for authorization requests.

Valid values are from 1 to 65535. 		udpPortAuthorization integer
Accounting Port The number of the UDP port that the RADIUS server uses for accounting requests.

Valid values are from 1 to 65535. 		udpPortAccounting integer
Secret The shared secret or encryption key used to encrypt data when communicating with the RADIUS server. The shared secret must be 32 or fewer characters. This secret must match the secret configured on the RADIUS server. secret passwordText
Timeout The maximum amount of time, in seconds, that the Sun Secure Application Switch waits for a RADIUS server to respond to a request.

Valid values are from 1 to 10. 		timeout integer
Retries The maximum number of retries before this RADIUS server is deemed unavailable.

Valid values are from 0 to 10. 		retries integer
Admin Mode The request types that are sent to a RADIUS server.

Valid values:
  • disabled : Do not use this server.
  • authentication : Use the server for authentication.
  • authorization : Use the server for authorization.
  • authenticationAndAuthorization : Use the server for authentication and authorization.
  • accounting : Use the server for accounting.
  • authenticationAndAuthorizationAndAccounting : Use the server for authentication, authorization, and accounting.
adminState enumeration
Priority Groups and prioritizes RADIUS servers. A value of 1 is the highest priority.

For authentication requests, if you assign the same priority to more than one authentication server, the system uses each server in a group in a round-robin fashion.

For accounting records, the system always tries to send records to the accounting server that received the original start record. If that accounting server is not available and you assign the same priority to more than one accounting server, the system uses the next server in the group. Once the system accesses an available server, it tries to send subsequent accounting records to that server.

The system attempts to use RADIUS servers with a priority of 1 first. If this server (or server group) is unavailable, the system tries the next highest priority server (or server group), until it finds a server it can access.

If the system cannot find an available RADIUS server, it tries to find another user entry that it can use for authentication or authorization. If it cannot find another valid user entry, the authentication or authorization request is rejected.

Valid values are from 1 to 10. 		priority integer
Vendor Id Offset Offset for Sun-specific attributes. 0 to use vendor specific attribute encoding.

Valid values are from 0 to 250. 		vendorIdOffset integer
Nas Identifier A string to identify the Sun Secure Application Switch to this RADIUS server. nasIdentifier text
Operational State The last known state of the connection for the specified server.

Valid values:
  • unknown : The AAA server connection state is not known.
  • connectOK : Connection established to the AAA server.
  • connectError : A TCP connection error occurred.
  • rxTimeout : The AAA server did not respond within the allowed time.
  • rxError : A response from the AAA server contained or caused an error.
  • txError : An error occurred when transmitting requests to the AAA server.
operConnectionState enumeration
RX Packets The number of packets received from the server. packetsReceived counter32
RX Bytes The number of bytes received from the server. bytesReceived counter32
TX Packets The number of packets sent to the server. packetsSent counter32
TX Bytes The number of bytes sent to the server. bytesSent counter32

Related actions

You can do the following