settings radius

The settings radius command configures the verification of the users over a RADIUS server when signing in to the management interface and to the WEB-CLI.

Command Summary

TR7 WEB-CLI · settings radius

# Tab after the command

admin@TR7LBWAF01> settings radius

show update

 

admin@TR7LBWAF01> settings radius show # show the settings

admin@TR7LBWAF01> settings radius update … # change

admin@TR7LBWAF01>  

Fields

This resource is a single setting: no identifier is written, update is run directly and only the fields to be changed are given.

Field	What it does	What is written after it
--host	Determines the RADIUS server the verification will be done on	The server name or IP address; the port is not written in this field
--port	Determines the authentication port of the server	A port number
--secret	Determines the secret key shared between the device and the server	The key defined on the server for this device

Examples

TR7 WEB-CLI · RADIUS

admin@TR7LBWAF01> settings radius update --host 10.0.1.30 --port 1812 --secret <key>

admin@TR7LBWAF01> settings radius show

admin@TR7LBWAF01>  

Things to Know

• The secret key must be the same on both sides. If the --secret value does not match exactly the key defined on the server for this device, the verification request stays unanswered.
• The opening of the users is a separate setting. Whether the user verified with RADIUS will be opened by itself on the device is determined in the settings user-management command; radius must be added to the source list there.
• The three central identity methods are configured separately. Alongside RADIUS, settings ldap and settings tacacs have their own commands.
• Only a number is written in the port field. The server address and the port are separate fields; the address:port format is not written in the address field.