apm aaa radius
apm aaa radius(1) BIG-IP TMSH Manual apm aaa radius(1)
NAME
radius - Manages an AAA RADIUS server.
MODULE
apm aaa
SYNTAX
Configure the radius component within the aaa module using the syntax
shown in the following sections.
CREATE/MODIFY
create radius [name]
modify radius [name]
options:
acct-port [integer]
address [[ip addr] | none]
auth-port [integer]
app-service [[string] | none]
description [[string] | none]
mode [acct | auth | both]
nas-ip-address [[ip addr] | none]
nas-ipv6-address [[ip addr] | none]
location-specific [true | false]
pool [[string] | none]
retries [integer]
secret [string]
service-type [default | login | framed | callback-login | callback-framed | outbound | administrative | nas-prompt | authenticate-only | callback-nas-promit | call-check | callback-administrative]
timeout [integer]
use-pool [enabled | disabled]
edit radius | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties
DISPLAY
list radius
list radius [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
app-service
non-default-properties
one-line
partition
DELETE
delete radius [name]
DESCRIPTION
You can use the radius component to create and manage an AAA RADIUS
server.
EXAMPLES
create rad_auth { address 172.30.6.144 secret "test" use-pool
"disabled" }
Creates the AAA RADIUS server named rad_auth that has an IP
address of 172.30.6.144 and has a shared secret of test.
delete radius MyRadiusServer
Deletes the AAA RADIUS server named MyRadiusServer from the
system.
OPTIONS
acct-port
Specifies the port number of the external AAA RADIUS accounting
server. The default is radius-acct.
address
Specifies the IP address of the AAA RADIUS server. This option is
required.
auth-port
Specifies the port number for the service. The default is radius.
This option is required.
app-service
Specifies the name of the application service to which the object
belongs. The default value is none. Note: If the strict-updates
option is enabled on the application service that owns the object,
you cannot modify or delete the object. Only the application
service can modify or delete the object.
description
Specifies a unique description for the AAA RADIUS server. The
default is none.
mode Specifies the configuration mode you want to use for RADIUS
authentication. Note that you cannot modify the mode once you
create the server. The options are:
acct Configures the system to perform only RADIUS accounting. Use
this option to pass accounting information about your users
to the external RADIUS accounting server.
auth Configures the system to perform only RADIUS authentication.
Use this option to authenticate your users through a RADIUS
server.
both Configures the system to perform both RADIUS authentication
and RADIUS accounting simultaneously.
[name]
Specifies the name of an AAA RADIUS server. This option is
required.
nas-ip-address
Specifies an IP address as RADIUS attribute 4 that you can
configure without changing the source IP address in the IP header
of the RADIUS packets. Use this option in situations where you are
using an NAS cluster to be recognized as a single RADIUS client.
nas-ipv6-address
Specifies an IPv6 address as RADIUS attribute 4 that you can
configure without changing the source IP address in the IP header
of the RADIUS packets. Use this option in situations where you are
using an NAS cluster to be recognized as a single RADIUS client.
location-specific
Specifies whether or not this object contains one or more
attributes with values that are specific to the location where the
BIG-IP device resides. The location-specific attribute is either
true or false. When using policy sync, mark an object as location-
specific to prevent errors that can occur when policies reference
objects, such as authentication servers, that are specific to a
certain location.
partition
Displays the partition within which the component resides.
pool Specifies the name of the pool to which this server belongs. The
default is none.
retries
Specifies the number of times the BIG-IP system tries to make a
connection to the RADIUS AAA server after the first attempt fails.
The default is 3.
secret
Specifies the shared secret password of the AAA RADIUS server.
This option is required.
service-type
Specifies the type of service used for the RADIUS server. The
default is default, which behaves as authenticate-only.
timeout
Specifies a timeout interval (in seconds) for the AAA RADIUS
server after which the server closes a connection. The default is
5.
use-pool
Enables or disables the use of the pool specified using the pool
option. The default is none.
SEE ALSO
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or
by any means, electronic or mechanical, including photocopying,
recording, or information storage and retrieval systems, for any
purpose other than the purchaser's personal use, without the express
written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2011-2013, 2015-2016. All rights
reserved.
BIG-IP 2016-03-14 apm aaa radius(1)