Specifies one to three IP addresses (with optional port number) for external RADIUS authentication servers. These servers can be used to authenticate host (iSCSI initiator) access to volumes through CHAP, authenticate group administration accounts, or authenticate Microsoft service access to the group. The servers are contacted in the order specified.
To enable RADIUS authentication for host access to volumes, see grpparams iscsi-radius-auth. To enable RADIUS authentication for group administration accounts, see grpparams login-radius-auth.
You may want to specify secrets (passwords) for the authentication servers, as described in grpparams radius-auth-secrets.
In addition, you can specify retry and timeout values for the servers. See grpparams radius-auth-retries and grpparams radius-auth-timeout for more information.
Note: After you have configured the group to use a RADIUS authentication server for host access to volumes, you can create an access control record for the volume to which you want to restrict access and in the record specify a CHAP account name that corresponds to an account on the RADIUS server. For more information on setting up access control records, see volume select access create .
Format
grpparams radius-auth-list ip_address[:port]
Variable
|
ip_address[:port] |
One to three IP addresses, separated by commas but no spaces, and optional port. If you do not want to use the default RADIUS server port (1812), also specify a port. The order in which you specify the IP addresses is the order in which they will be used. If you want to change any of the servers in the list, you must re-enter all the IP addresses. |
Example
The following command specifies two RADIUS authentication servers:
> grpparams radius-auth-list 10.25.35.52:1820,10.25.44.123