Switch operating rules for RADIUS

You must have at least one RADIUS server accessible to the switch.

The switch supports authentication and accounting using up to 15 RADIUS servers. The switch accesses the servers in the order in which they are listed by show radius. If the first server does not respond, the switch tries the next one, and so-on. To change the order in which the switch accesses RADIUS servers, see Changing RADIUS-server access order.

You can select RADIUS as the primary authentication method for each type of access. (Only one primary and one secondary access method is allowed for each access type.)

In the switch, EAP RADIUS uses MD5 and TLS to encrypt a response to a challenge from a RADIUS server.