apm aaa radius

apm aaa radius(1)				  BIG-IP TMSH Manual				    apm aaa radius(1)

NAME
       radius - Manages an AAA RADIUS server.

MODULE
       apm aaa

SYNTAX
       Configure the radius component within the aaa module using the syntax shown in the following sections.

   CREATE/MODIFY
	create radius [name]
	modify radius [name]
	  options:
	     acct-port [integer]
	     address [[ip addr] | none]
	     auth-port [integer]
	     app-service [[string] | none]
	     description [[string] | none]
	     mode [acct | auth | both]
	     nas-ip-address [[ip addr] | none]
	     nas-ipv6-address [[ip addr] | none]
	     location-specific [true | false]
	     pool [[string] | none]
	     retries [integer]
	     secret [string]
	     service-type [default | login | framed | callback-login | callback-framed | outbound | administrative | nas-prompt | authenticate-only | callback-nas-promit | call-check | callback-administrative]
	     timeout [integer]
	     use-pool [enabled | disabled]

	edit radius | [glob] | [regex] ] ... ]
	  options:
	    all-properties
	    non-default-properties

   DISPLAY
	list radius
	list radius [ [ [name] | [glob] | [regex] ] ... ]
	  options:
	    all-properties
	    app-service
	    non-default-properties
	    one-line
	    partition

   DELETE
	delete radius [name]

DESCRIPTION
       You can use the radius component to create and manage an AAA RADIUS server.

EXAMPLES
       create rad_auth { address 172.30.6.144 secret "test" use-pool "disabled" }
	    Creates the AAA RADIUS server named rad_auth that has an IP address of 172.30.6.144 and has a shared
	    secret of test.

       delete radius MyRadiusServer
	    Deletes the AAA RADIUS server named MyRadiusServer from the system.

OPTIONS
       acct-port
	    Specifies the port number of the external AAA RADIUS accounting server. The default is radius-acct.

       address
	    Specifies the IP address of the AAA RADIUS server. This option is required.

       auth-port
	    Specifies the port number for the service. The default is radius. This option is required.

       app-service
	    Specifies the name of the application service to which the object belongs. The default value is none.
	    Note: If the strict-updates option is enabled on the application service that owns the object, you cannot
	    modify or delete the object. Only the application service can modify or delete the object.

       description
	    Specifies a unique description for the AAA RADIUS server. The default is none.

       mode Specifies the configuration mode you want to use for RADIUS authentication. Note that you cannot modify
	    the mode once you create the server.  The options are:

	    acct Configures the system to perform only RADIUS accounting. Use this option to pass accounting
		 information about your users to the external RADIUS accounting server.

	    auth Configures the system to perform only RADIUS authentication. Use this option to authenticate your
		 users through a RADIUS server.

	    both Configures the system to perform both RADIUS authentication and RADIUS accounting simultaneously.

       [name]
	    Specifies the name of an AAA RADIUS server. This option is required.

       nas-ip-address
	    Specifies an IP address as RADIUS attribute 4 that you can configure without changing the source IP
	    address in the IP header of the RADIUS packets. Use this option in situations where you are using an NAS
	    cluster to be recognized as a single RADIUS client.

       nas-ipv6-address
	    Specifies an IPv6 address as RADIUS attribute 4 that you can configure without changing the source IP
	    address in the IP header of the RADIUS packets. Use this option in situations where you are using an NAS
	    cluster to be recognized as a single RADIUS client.

       location-specific
	    Specifies whether or not this object contains one or more attributes with values that are specific to the
	    location where the BIG-IP device resides. The location-specific attribute is either true or false. When
	    using policy sync, mark an object as location-specific to prevent errors that can occur when policies
	    reference objects, such as authentication servers, that are specific to a certain location.

       partition
	    Displays the partition within which the component resides.

       pool Specifies the name of the pool to which this server belongs. The default is none.

       retries
	    Specifies the number of times the BIG-IP system tries to make a connection to the RADIUS AAA server after
	    the first attempt fails. The default is 3.

       secret
	    Specifies the shared secret password of the AAA RADIUS server. This option is required.

       service-type
	    Specifies the type of service used for the RADIUS server. The default is default, which behaves as
	    authenticate-only.

       timeout
	    Specifies a timeout interval (in seconds) for the AAA RADIUS server after which the server closes a
	    connection. The default is 5.

       use-pool
	    Enables or disables the use of the pool specified using the pool option. The default is none.

SEE ALSO
COPYRIGHT
       No part of this program may be reproduced or transmitted in any form or by any means, electronic or
       mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
       other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.

       F5 Networks and BIG-IP (c) Copyright 2011-2013, 2015-2016. All rights reserved.

BIG-IP						      2016-03-14				    apm aaa radius(1)