Procedure
Purpose
Command or Action
Enters global configuration move.
switch#
configure terminal
Step 1
Creates a RADIUS server group and enters the RADIUS
server group configuration submode for that group.
switch (config)#
aaa group server
radius group-name
Step 2
The
group-name
argument is a case-sensitive, alphanumeric
string with a maximum of 127 characters.
Configures the RADIUS server as a member of the RADIUS
server group.
switch (config-radius)#
server
{
ipv4-address
|
ipv6-address
|
server-name
}
Step 3
If the specified RADIUS server is not found, configure it
using the
radius-server host
command and retry this
command.
(Optional)
Configures the monitoring dead time. The default is 0
minutes. The range is from 1 through 1440.
switch (config-radius)#
deadtime
minutes
Step 4
If the dead-time interval for a RADIUS server group
is greater than zero (0), that value takes precedence
over the global dead-time value.
Note
(Optional)
Assigns a source interface for a specific RADIUS server
group.
switch(config-radius)#
source-interface interface
Step 5
The supported interface types are management and VLAN.
Use the
source-interface
command to override the
global source interface assigned by the
ip radius
source-interface
command.
Note
Exits configuration mode.
switch(config-radius)#
exit
Step 6
(Optional)
Displays the RADIUS server group configuration.
switch(config)#
show
radius-server group
[
group-name
]
Step 7
(Optional)
Saves the change persistenetly through reboots and restarts
by copying the running configuration to the startup
configuration.
switch(config)#
copy
running-config startup-contig
Step 8
The following example shows how to configure a RADIUS server group:
switch#
configure terminal
switch (config)#
aaa group server radius RadServer
switch (config-radius)#
server 10.10.1.1
switch (config-radius)#
deadtime 30
switch (config-radius)#
use-vrf management
switch (config-radius)#
exit
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
36
Configuring RADIUS
Configuring RADIUS Server Groups
