CLI Guide - WatchGuard Technologies

CHAPTER 3: Configuration Mode Commands
times, to configure a primary and a backup server
connection.
If you want to delete the configuration entries for a
backup RADIUS server, enter the “no backup”
argument.
-ip
This argument establishes the IP address of the
RADIUS server that will be used.
-secret
This argument records the secret password
allowing this appliance to contact the database in
the RADIUS server.
[-authentication ]
This argument establishes which authentication is
being used; PAP or SecurID.
[-port ]
This optional argument records the RADIUS server
port number, if needed.
[-user_group ]
This optional argument specifies the name of a user
group profile used by RADIUS users. Be sure to
use the “user_group_profile” command to control
session time and idle timeout for RADIUS users.
Examples
WG(config-ras)#database -radius primary
\
-ip 12.10.1.2 -sec confidential \
-auth secure_id -user_group
exec_staff
WG(config-ras)#database -
internal
WG(config-ras)#database -radius backup
\
-ip 12.10.1.3 \
-sec confidential
106 WatchGuard Vclass 5.1