
Chapter 3. Command Reference
36 X Family CLI Reference V 2.5.1
delete an IP
address group
Use configure terminal address-group remove to delete an IP address group. In this example, the
“test” group is deleted:
hostname# conf t address-group remove test
conf t authentication
The configure terminal authentication command configures RADIUS authentication and privilege
groups on the device.
privilege-groups remove name
deletes a privilege group.
privilege-groups update name [web-filtering-bypass] [firewall-authentication]
[vpn-client-access]
adds privileges to the named privilege group. These privileges will be assigned to users that
authenticate either via RADIUS or via the local database.
radius
controls RADIUS authentication.
default-privilege-group priv-group
defines a privilege group for a user currently unassigned to a privilege group on the
RADIUS server.
disable
disables RADIUS authentication.
enable
enables RADIUS authentication.
retries number
defines the number of times that the device will attempt to connect to the RADIUS
server. If the RADIUS server does not respond after that number of retries, the
device will use the local database for authentication.
server < primary | secondary > address [port port] shared-secret string
auth-method < pap | chap >
configures the settings for the RADIUS server. You can configure both a primary
and secondary server.
server secondary none
removes the configuration for a secondary RADIUS server.
timeout seconds
defines the time in seconds before the device will again attempt to connect to the
RADIUS server (if no response was originally received from the server).
Komentarze do niniejszej Instrukcji