Security
RADIUS
STEP 1
STEP 2
STEP 3
!
CAUTION
Cisco Small Business SG200 Series 8-port Smart Switch
Configuring Global RADIUS Settings
To configure the global settings:
Click Security > RADIUS in the navigation window.
Enter the parameters:
•
Retries—Maximum number of times the RADIUS client retransmits requests
to the RADIUS server. The range is 1 to 10. The default is 3.
•
Timeout for Reply—Number of seconds the switch waits for a RADIUS
server to reply to a server request before sending another request. The
range is 1 to 30. The default is 3.
•
Dead Time—Length of time a RADIUS server is bypassed once the switch
determines it is unavailable. Bypassing unavailable switches improves
switch response times. The range is 0 to 2000. The default is 0.
•
RADIUS Attribute 4 (NAS-IP Address)—Select to enable the switch to
include the network access server (NAS) attribute in Access Request
RADIUS server packets. If this option is disabled, the RADIUS client uses the
switch management port address as the NAS-IP Address.
•
NAS-IP Address—IP address to include in Access Request packets. This
field is editable only when RADIUS Attribute 4 is enabled. The address
should be unique to the NAS within the scope of the RADIUS server.
NOTE:
The Current RADIUS Server field displays the IP address of the most
recently configured RADIUS server, if any.
Click Apply. Your changes are saved to the Running Configuration.
Adding a RADIUS Server
You can configure multiple RADIUS servers and configure priority levels that
determine the order they are contacted.
All management users are created with read-write permissions. Ensure that all
RADIUS server users you configure have the same privilege levels; otherwise they
are not granted access to the switch.
10
147