As the RADIUS protocol is simple and scalable, it is the most widely used AAA protocol.

Configuring RADIUS

Procedure

Step1 Enable RADIUS authentication and authorization.

set system aaa radius authorization disable <true | false>

Step2 Configure IP address of RADIUS authentication and authorization server.

set system aaa radius authorization server-ip <ipv4_address>

Step3 Configure port number of RADIUS authentication and authorization server.

set system aaa radius authorization server-ip <ipv4_address> port <integer>

By default, the port number of RADIUS authentication and authorization server is 1812. The value of port number should be the same with that on the RADIUS servers.

Step4 Configure RADIUS authentication and authorization shared key.

set system aaa radius authorization server-ip <ipv4_address> shared-key <string>

The value of RADIUS authentication and authorization shared key should be the same with that on the RADIUS server.

Step5 Configure the source interface.

set system aaa radius source-interface <interface-name>

Step6 Configure RADIUS authentication and authorization connection timeout.

set system aaa radius authorization server-ip <ipv4_address> timeout <integer>

By default, the value of RADIUS authentication and authorization connection timeout is 5 seconds.

Step7 Enable RADIUS accounting function.

set system aaa radius accounting disable <true | false>

Step8 Configure RADIUS accounting server IP.

set system aaa radius accounting server-ip <ipv4_address>

Step9 Configure port number of RADIUS accounting server.

set system aaa radius accounting server-ip <ipv4_address> port <integer>

By default, the port number of RADIUS accounting server is 1813. The value of port number should be the same with that on the RADIUS servers.

Step10 Configure RADIUS accounting shared key.

set system aaa radius accounting server-ip <ipv4_address> shared-key <string>

Step11 Configure RADIUS accounting connection timeout.

set system aaa radius accounting server-ip <ipv4_address> timeout <integer>

Step12 Commit the configurations.

commit

Configuration Example

Networking Requirements

As shown in Figure 1, PC1, PC2, and PC3 connect to the internet through the PICA8 Switch. Configure RADIUS function on PICA8 Switch to accomplish authentication, authorization, and accounting of PC1, PC2, and PC3 through RADIUS server1 and RADIUS server2.

Figure 1. RADIUS Networking Topology

Procedure

Step1 Enable RADIUS authentication and authorization.

admin@XorPlus# set system aaa radius authorization disable false

Step2 Configure IP address of RADIUS authentication and authorization server.

admin@XorPlus# set system aaa radius authorization server-ip 10.10.51.4
admin@XorPlus# set system aaa radius authorization server-ip 10.10.51.5

Step3 Configure port number of RADIUS authentication and authorization server.

admin@XorPlus# set system aaa radius authorization server-ip 10.10.51.4 port 1800
admin@XorPlus# set system aaa radius authorization server-ip 10.10.51.5 port 1800

By default, the port number of RADIUS authentication and authorization server is 1812.

Step4 Configure RADIUS authentication and authorization shared key.

admin@XorPlus# set system aaa radius authorization server-ip 10.10.51.4 shared-key pica8
admin@XorPlus# set system aaa radius authorization server-ip 10.10.51.5 shared-key pica8

The value of RADIUS authentication and authorization shared key should be the same with that on the RADIUS server.

Step5 Configure the source interface.

admin@XorPlus# set system aaa radius source-interface eth0

Step6 Configure RADIUS authentication and authorization connection timeout.

admin@XorPlus# set system aaa radius authorization server-ip 10.10.51.4 timeout 30
admin@XorPlus# set system aaa radius authorization server-ip 10.10.51.5 timeout 30

By default, the value of RADIUS connection timeout is 5 seconds.

Step7 Enable RADIUS accounting.

admin@XorPlus# set system aaa radius accounting disable false

Step8 Configure IP address of RADIUS accounting server.

admin@XorPlus# set system aaa radius accounting server-ip 10.10.51.4
admin@XorPlus# set system aaa radius accounting server-ip 10.10.51.5

Step9 Configure port number of RADIUS accounting server.

admin@XorPlus# set system aaa radius accounting server-ip 10.10.51.4 port 1801
admin@XorPlus# set system aaa radius accounting server-ip 10.10.51.5 port 1801

By default, the port number of RADIUS accounting server is 1813.

Step10 Configure RADIUS accounting shared key.

admin@XorPlus# set system aaa radius accounting server-ip 10.10.51.4 shared-key pica8
admin@XorPlus# set system aaa radius accounting server-ip 10.10.51.5 shared-key pica8

Step11 Configure RADIUS accounting connection timeout.

admin@XorPlus# set system aaa radius accounting server-ip 10.10.51.4 timeout 30
admin@XorPlus# set system aaa radius accounting server-ip 10.10.51.5 timeout 30

Step12 Commit the configurations.

admin@XorPlus# commit

Check the Configuration

You can use the show system aaa radius command to view the configuration information of RADIUS.

admin@XorPlus# show system aaa radius
radius {
        authorization {
            disable: false
            server-ip 10.10.51.4 {
                 timeout: 30
                port: 1800
            }
            server-ip 10.10.51.5 {
                timeout: 30
                port: 1800
            }
        }
        accounting {
            disable: false
            server-ip 10.10.51.4{
                timeout: 30
                port: 1801
            }
            server-ip 10.10.51.5 {
                timeout: 30
                port: 1801
            }
        }

Browser not supported