Skip to content

Commit 7f23c90

Browse files
committed
Merge branch '513' into stage
2 parents ae3e02b + b9745cd commit 7f23c90

1 file changed

Lines changed: 9 additions & 5 deletions

File tree

content/cumulus-linux-513/Layer-1-and-Switch-Ports/802.1X-Interfaces.md

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,9 @@ In Cumulus Linux 5.13 and later, you must provide the <span class="a-tooltip">[N
5858
To configure an 802.1X interface:
5959
- **Required**: Provide the 802.1X RADIUS server IPv4 or IPv6 address. If you want to specify more than one server, provide the priority for each server (a value between 1 and 3). If you specify just one server, Cumulus Linux sets the priority to 1. You can also specify a VRF for outgoing RADIUS accounting and authorization packets. A VRF is optional.
6060
- **Required**: Provide the 802.1X RADIUS shared secret.
61-
- **Required**: Provide either the NAS IP address or the NAS identifier, or both. The NAS IP address is an IPv4 address used only in Access-Request packets from the RADIUS client (the Cumulus switch) to the RADIUS server (not in subsequent packet types, such as Access-Accept, Access-Reject, or Access-Challenge). The NAS identifier is a string such as a fully qualified domain name that identifies the NAS to the RADIUS server. The RADIUS server uses the NAS IP address and the NAS identifier for accounting purposes. On the RADIUS server, the NAS IP address and the NAS identifier identify the source NAS. If two or more NAS devices have the same NAS IP address, you can use a different NAS identifier for each of them to uniquely identify them at the RADIUS server.
61+
- **Required**: Provide either the NAS IP address or the NAS identifier, or both. The RADIUS server uses the NAS IP address and the NAS identifier for accounting purposes. On the RADIUS server, the NAS IP address and the NAS identifier identify the source NAS. If two or more NAS devices have the same NAS IP address, you can use a different NAS identifier for each of them to uniquely identify them at the RADIUS server.
62+
- The NAS IP address is an IPv4 address used only in Access-Request packets from the RADIUS client (the Cumulus switch) to the RADIUS server (not in subsequent packet types, such as Access-Accept, Access-Reject, or Access-Challenge).
63+
- The NAS identifier is a string such as a fully qualified domain name that identifies the NAS to the RADIUS server. You can specify a maximum of 253 ASCII characters.
6264
- **Required**: Enable 802.1X on an interface.
6365
- Optional: Change the default 802.1X RADIUS accounting port. You can specify a value between 1000 and 65535. The default value is 1813.
6466
- Optional: Change the default 802.1X RADIUS authentication port. You can specify a value between 1000 and 65535. The default value is 1812.
@@ -657,13 +659,15 @@ rtt min/avg/max/mdev = 0.552/0.578/0
657659

658660
### Show RADIUS Server Configuration
659661

660-
To show the list of RADIUS servers, run the `nv show system dot1x radius` command:
662+
To show the list of RADIUS servers and the NAS IP address and identifier, run the `nv show system dot1x radius` command:
661663

662664
```
663665
cumulus@switch:~$ nv show system dot1x radius
664-
operational applied
665-
-------- ----------- ---------
666-
[server] 10.10.10.1
666+
operational applied
667+
-------- ----------- ---------
668+
[server] 10.10.10.1 10.10.10.1
669+
nas-ip-address 10.10.10.3 10.10.10.3
670+
nas-identifier AP-123 AP-123
667671
```
668672

669673
To show configuration information for RADIUS servers, run the `nv show system dot1x radius server` command:

0 commit comments

Comments
 (0)