Using Radius To Configure Login Authentication - Nokia ESB26 User Manual

32. Remote Authentication Dial-In User Service (RADIUS)
over by requests for RADIUS authentication. The no form of this command sets the dead-
time to zero (non-responding servers are not passed over).
NOTE
A configured RADIUS server is presumed dead, if timeout time is reached in three
authentication sessions.
Command Syntax
device-name(config)#radius-server deadtime <minutes>
device-name(config)#no radius-server timeout
Argument Description
minutes Dead-time interval in minutes, in the range <0-1440>
Creating the Local Database
The local authentication database is used for authentication if the configured radius server is
not responding.
For details on how to use the username command, refer to "Creating a New User with a
Privilege Level".

Using RADIUS to Configure Login Authentication

Use the aaa authentication login default command with the radius method keyword to
specify RADIUS as the login authentication method.
aaa authentication login default
The aaa authentication command, in Global Configuration mode, specifies the default login
authentication method. The no form of this command disables authentication – except for the
login password.
Local authentication is tried only if there is no response from the RADIUS server.
NOTE
The secondary authentication method is always local. This is to prevent the situation that
you cannot configure authentication on an interface because RADIUS authentication
prevents you from logging in.
MN700004 Rev 01 354