Cisco Catalyst 2960 Series, Configuration Manual

Page: 1056 / 2288

Purpose Command or Action
Enters the global configuration mode. configure terminal
Example:
Switch#
configure terminal
Step 2
Enables AAA. aaa new-model
Example:
Switch(config)# aaa new-model
Step 3
Configures the switch as an authentication, authorization, and
accounting (AAA) server to facilitate interaction with an external
policy server. aaa server radius dynamic-author
Example:
Switch(config)#
aaa server radius
Step 4
dynamic-author
Enters dynamic authorization local server configuration mode and
specifies a RADIUS client from which a device will accept CoA
and disconnect requests.
client
{ ip-address | name } [
vrf vrfname
]
[
server-key string
]
Step 5
Configures the RADIUS key to be shared between a device and
RADIUS clients. server-key [ 0 | 7 ] string
Example:
Switch(config-sg-radius)# server-key
Step 6
your_server_key
Specifies the port on which a device listens for RADIUS requests
from configured RADIUS clients. port port-number
Example:
Switch(config-sg-radius)#
port 25
Step 7
Specifies the type of authorization the switch uses for RADIUS
clients. auth-type { any | all | session-key }
Example:
Switch(config-sg-radius)# auth-type any
Step 8
The client must match all the configured attributes for authorization.
(Optional) Configures the switch to ignore the session-key. ignore session-key
Step 9
For more information about the ignore command, see the Cisco
IOS Intelligent Services Gateway Command Reference on
Cisco.com.
(Optional) Configures the switch to ignore the server-key. ignore server-key Step 10
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
974
How to Configure RADIUS Change-of-Authorization