<!--
  ~ Copyright (c) 2026 Arista Networks, Inc.
  ~ Use of this source code is governed by the Apache License 2.0
  ~ that can be found in the LICENSE file.
  -->
=== "Table"

    | Variable | Type | Required | Default | Value Restrictions | Description |
    | -------- | ---- | -------- | ------- | ------------------ | ----------- |
    | [<samp>radius_server</samp>](## "radius_server") | Dictionary |  |  |  |  |
    | [<samp>&nbsp;&nbsp;attribute_32_include_in_access_req</samp>](## "radius_server.attribute_32_include_in_access_req") | Dictionary |  |  |  |  |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;hostname</samp>](## "radius_server.attribute_32_include_in_access_req.hostname") | Boolean |  |  |  |  |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;format</samp>](## "radius_server.attribute_32_include_in_access_req.format") | String |  |  |  | Specify the format of the NAS-Identifier. If 'hostname' is set, this is ignored. |
    | [<samp>&nbsp;&nbsp;deadtime</samp>](## "radius_server.deadtime") | Integer |  |  | Min: 1<br>Max: 1000 | Time to skip a non-responsive server in minutes. |
    | [<samp>&nbsp;&nbsp;dynamic_authorization</samp>](## "radius_server.dynamic_authorization") | Dictionary |  |  |  |  |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;port</samp>](## "radius_server.dynamic_authorization.port") | Integer |  |  | Min: 0<br>Max: 65535 | TCP Port. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;tls_ssl_profile</samp>](## "radius_server.dynamic_authorization.tls_ssl_profile") | String |  |  |  | Name of TLS profile. |
    | [<samp>&nbsp;&nbsp;servers</samp>](## "radius_server.servers") | List, items: Dictionary |  |  |  | Hosts configuration for VRF default. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;-&nbsp;host</samp>](## "radius_server.servers.[].host") | String | Required |  |  | -> Host IP address or name. Multiple server with the same hostname/IP address can be configured for TLS and no TLS. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;tls</samp>](## "radius_server.servers.[].tls") | Dictionary |  |  |  | When TLS is configured, `key` is ignored. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;enabled</samp>](## "radius_server.servers.[].tls.enabled") | Boolean |  |  |  | Enable TLS for radius-server. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ssl_profile</samp>](## "radius_server.servers.[].tls.ssl_profile") | String |  |  |  | Name of TLS profile. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;port</samp>](## "radius_server.servers.[].tls.port") | Integer |  |  | Min: 0<br>Max: 65535 | TCP Port used for TLS. EOS default is 2083. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;timeout</samp>](## "radius_server.servers.[].timeout") | Integer |  |  | Min: 1<br>Max: 1000 |  |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;retransmit</samp>](## "radius_server.servers.[].retransmit") | Integer |  |  | Min: 0<br>Max: 100 |  |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;key</samp>](## "radius_server.servers.[].key") | String |  |  |  | Encrypted key - only type 7 supported.<br>When TLS is configured, `key` is ignored. |
    | [<samp>&nbsp;&nbsp;vrfs</samp>](## "radius_server.vrfs") | List, items: Dictionary |  |  |  |  |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;-&nbsp;name</samp>](## "radius_server.vrfs.[].name") | String | Required, Unique |  |  | Non-defualt VRF name. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;servers</samp>](## "radius_server.vrfs.[].servers") | List, items: Dictionary | Required |  |  | Hosts configuration for VRF default. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-&nbsp;host</samp>](## "radius_server.vrfs.[].servers.[].host") | String | Required |  |  | -> Host IP address or name. Multiple server with the same hostname/IP address can be configured for TLS and no TLS. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;tls</samp>](## "radius_server.vrfs.[].servers.[].tls") | Dictionary |  |  |  | When TLS is configured, `key` is ignored. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;enabled</samp>](## "radius_server.vrfs.[].servers.[].tls.enabled") | Boolean |  |  |  | Enable TLS for radius-server. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ssl_profile</samp>](## "radius_server.vrfs.[].servers.[].tls.ssl_profile") | String |  |  |  | Name of TLS profile. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;port</samp>](## "radius_server.vrfs.[].servers.[].tls.port") | Integer |  |  | Min: 0<br>Max: 65535 | TCP Port used for TLS. EOS default is 2083. |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;timeout</samp>](## "radius_server.vrfs.[].servers.[].timeout") | Integer |  |  | Min: 1<br>Max: 1000 |  |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;retransmit</samp>](## "radius_server.vrfs.[].servers.[].retransmit") | Integer |  |  | Min: 0<br>Max: 100 |  |
    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;key</samp>](## "radius_server.vrfs.[].servers.[].key") | String |  |  |  | Encrypted key - only type 7 supported.<br>When TLS is configured, `key` is ignored. |
    | [<samp>&nbsp;&nbsp;tls_ssl_profile</samp>](## "radius_server.tls_ssl_profile") | String |  |  |  | Name of global TLS profile. |

=== "YAML"

    ```yaml
    radius_server:
      attribute_32_include_in_access_req:
        hostname: <bool>

        # Specify the format of the NAS-Identifier. If 'hostname' is set, this is ignored.
        format: <str>

      # Time to skip a non-responsive server in minutes.
      deadtime: <int; 1-1000>
      dynamic_authorization:

        # TCP Port.
        port: <int; 0-65535>

        # Name of TLS profile.
        tls_ssl_profile: <str>

      # Hosts configuration for VRF default.
      servers:

          # -> Host IP address or name. Multiple server with the same hostname/IP address can be configured for TLS and no TLS.
        - host: <str; required>

          # When TLS is configured, `key` is ignored.
          tls:

            # Enable TLS for radius-server.
            enabled: <bool>

            # Name of TLS profile.
            ssl_profile: <str>

            # TCP Port used for TLS. EOS default is 2083.
            port: <int; 0-65535>
          timeout: <int; 1-1000>
          retransmit: <int; 0-100>

          # Encrypted key - only type 7 supported.
          # When TLS is configured, `key` is ignored.
          key: <str>
      vrfs:

          # Non-defualt VRF name.
        - name: <str; required; unique>

          # Hosts configuration for VRF default.
          servers: # required

              # -> Host IP address or name. Multiple server with the same hostname/IP address can be configured for TLS and no TLS.
            - host: <str; required>

              # When TLS is configured, `key` is ignored.
              tls:

                # Enable TLS for radius-server.
                enabled: <bool>

                # Name of TLS profile.
                ssl_profile: <str>

                # TCP Port used for TLS. EOS default is 2083.
                port: <int; 0-65535>
              timeout: <int; 1-1000>
              retransmit: <int; 0-100>

              # Encrypted key - only type 7 supported.
              # When TLS is configured, `key` is ignored.
              key: <str>

      # Name of global TLS profile.
      tls_ssl_profile: <str>
    ```
