Purpose
Command or Action
Allows users to specify a RADIUS server to send the
authentication request when logging in. The default is
disabled.
radius-server directed-request
Example:
switch(config)#
radius-server directed-request
Step 2
Displays the RADIUS configuration pending for
distribution.
(Optional)
show radius
{
pending
|
pending-diff
}
Example:
Step 3
switch(config)#
show radius pending
Applies the RADIUS configuration changes in the
temporary database to the running configuration.
(Optional)
radius commit
Example:
Step 4
switch(config)#
radius commit
Exits configuration mode.
exit
Example:
Step 5
switch(config)#
exit
switch#
Displays the directed request configuration.
(Optional)
show radius-server directed-request
Example:
Step 6
switch#
show radius-server directed-request
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 7
switch#
copy running-config startup-config
Configuring the Global RADIUS Transmission Retry Count and Timeout Interval
You can configure a global retransmission retry count and timeout interval for all RADIUS servers. By default,
a Cisco NX-OS device retries transmission to a RADIUS server only once before reverting to local
authentication. You can increase this number up to a maximum of five retries per server. The timeout interval
determines how long the Cisco NX-OS device waits for responses from RADIUS servers before declaring a
timeout failure.
SUMMARY STEPS
1.
configure terminal
2.
radius-server retransmit count
3.
radius-server timeout seconds
4.
(Optional)
show radius
{
pending
|
pending-diff
}
5.
(Optional)
radius commit
6.
exit
7.
(Optional)
show radius-server
8.
(Optional)
copy running-config startup-config
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
52
Configuring RADIUS
Configuring the Global RADIUS Transmission Retry Count and Timeout Interval
