# RADIUS security configuration

Use the following procedures to configure RADIUS security for the switch.

## Configuring RADIUS globally using EDM

Use the following procedure to enable or disable RADIUS use of management IP.

### Procedure steps

1. From the navigation tree, double-click Security.

2. In the Security tree, double-click RADIUS.

3. In the work area, click the Globals tab.

4. Select the UseMgmtIP field to enable or disable RADIUS use of management IP.

5. In the toolbar, click Apply.

### Variable definitions

The following table describes the fields of Globals tab.

Variable | Value
--- | ---
RadiusUseMgmtIp | Controls whether RADIUS uses the IP address of system management as the source address for RADIUS requests.
RadiusPasswordFallbackEnabled | Enables or disables RADIUS password fallback.
RadiusDynAuthReplayProtection | Enable or disable RADIUS replay protection globally.
Reachability | Specifies the RADIUS server reachability mode. Values include: use-radius-uses dummy RADIUS requests to determine reachability of the RADIUS server. use-icmp-uses ICMP packets to determine reachability of the RADIUS server (default).
ReachabilityUserName | Specifies a name between 1 and 16 characters. Default is avaya.

## Configuring RADIUS Accounting Interim Updates using EDM

Use the following procedure to set the RADIUS Accounting Interim Updates.

### Procedure steps

1. From the navigation tree, double-click Security.

2. In the Security tree, double-click RADIUS.

3. In the work area, click the Globals tab.

4. In the RADIUS Accounting section, to enable RADIUS Accounting Interim Updates, select the InterimUpdates checkbox.

   To disable RADIUS Accounting Interim Updates, clear the InterimUpdates checkbox.

5. To modify the timeout interval for RADIUS Accounting Interim Updates, type a value in the InterimUpdatesInterval field.

6. To use the value given by server for the timeout interval, select the radiusServer option in the InterimUpdatesIntervalSource field.

   To use the value given by user for the timeout interval, select the configuredValue option in the InterimUpdatesIntervalSource field.

7. On the toolbar, click Apply.

### Variable definitions

The information in the following table describes the fields on the Radius Accounting tab.

Variable | Value
--- | ---
InterimUpdates | Specifies whether the RADIUS Accounting Interim Updates are set to enabled or disabled.
InterimUpdatesInterval | Specifies the timeout interval for RADIUS Accounting Interim-Updates. The value ranges from 60 to 3600 seconds
InterimUpdatesIntervalSource | Specifies the source for the timeout interval. The two options are: configuredValue radiusServer

## Configuring the RADIUS encapsulation method

Use the following procedure to set the RADIUS encapsulation method.

### Procedure

1. From the navigation tree, double-click Security.
2. In the Security tree, double-click RADIUS.
3. In the work area, click the Globals tab.
4. In the RADIUS Encapsulation section, for the EncapsulationProtocol field, click a radio button.
5. On the toolbar, click Apply/

### RADIUS Encapsulation field descriptions

Variable | Value
--- | ---
EncapsulationProtocol | Specifies the encapsulation protocol. Values include: pap: password authentication protocol. PAP is not considered a secure encapsulation. ms-chap-v2: Microsoft Challenge-Handshake Authentication Protocol version 2. MS-CHAP-V2 provides an authenticator-controlled password change mechanism also known as the change RADIUS password function. Note Change RADIUS password is available only in secure software images.