Command Line Reference
User Access And Authentication
RADIUS Configuration
4 min
show radius show radius \[command] show radius \[purpose] display terminal radius configuration information \[view] system view \[notes] after modifying the device configuration, you can use this command to view information such as the authentication type, timeout period, and communication key between the radius terminal and the server \[use cases] sonic# show radius radius server address 192 168 15 168 priority 1 auth port 1812 passkey radius \[server] \[key] auth type {chap|pap} radius \[server] \[key] auth type {chap|pap} \[command] radius server ip address key password auth type {chap|pap} priority pri num timeout time retransmit re num source src ip vrf vrf name no radius server ip address \[purpose] configure authentication parameters for the radius server \[parameter] parameter description ip address radius server ip address timeout transmission timeout interval, configurable range 1 60, default 5, unit seconds password shared key, default is public auth type authentication type chap/pap, default is pap re num set the number of retries for terminal login configuration range 1 10 pri num server priority, default value 1, configurable range 1 64 src ip source ip for terminal authentication vrf name this parameter must be configured when communicating with the radius server via the management port and the management port belongs to the mgmt vrf \[view] system configuration view \[notes] radius supports multiple authentication types, with the device supporting the following authentication methods pap simple authentication protocol, where the username and password are transmitted over the network in plaintext chap a more secure authentication protocol than pap the device sends the username, an encrypted password, and a 16 byte random number to the server the server locates the corresponding password based on the username, then encrypts the password using the received random number and a shared secret key the resulting output is compared with the received encrypted password if they match, authentication succeeds; otherwise, it fails by default, the device's authentication type is set to pap \[use cases] sonic(config)# radius server 1 1 1 1 key testing123 auth type chap priority 1 timeout 10 retransmit 3 source 1 1 1 1 vrf 1
