SUMMARY STEPS
1.
configure terminal
2.
radius-server host
{
hostname
|
ip-address
} [
auth-port port-number
] [
acct-port port-number
] [
timeout
seconds
] [
retransmit retries
] [
key string
]
3.
aaa new-model
4.
aaa group server radius group-name
5.
server ip-address
6.
end
DETAILED STEPS
Purpose
Command or Action
Enters the global configuration mode.
configure terminal
Example:
Switch#
configure terminal
Step 1
Specifies the IP address or hostname of the remote RADIUS server host.
radius-server host
{
hostname
|
ip-address
} [
auth-port port-number
]
Step 2
•
(Optional) For
auth-port port-number
, specify the UDP destination port
for authentication requests.
[
acct-port port-number
] [
timeout
seconds
] [
retransmit retries
] [
key
string
]
•
(Optional) For
acct-port port-number
, specify the UDP destination port for
accounting requests.
Example:
Switch(config)#
radius-server
•
(Optional) For
timeout seconds
, specify the time interval that the switch
waits for the RADIUS server to reply before resending. The range is 1 to
host 172.29.36.49 auth-port 1612
1000. This setting overrides the
radius-server timeout
global configuration
key rad1
command setting. If no timeout is set with the
radius-server host
command,
the setting of the
radius-server timeout
command is used.
•
(Optional) For
retransmit retries
, specify the number of times a RADIUS
request is resent to a server if that server is not responding or responding
slowly. The range is 1 to 1000. If no retransmit value is set with the
radius-server host
command, the setting of the
radius-server retransmit
global configuration command is used.
•
(Optional) For
key string
, specify the authentication and encryption key
used between the switch and the RADIUS daemon running on the RADIUS
server.
The key is a text string that must match the encryption key used on the
RADIUS server. Always configure the key as the last item in the
radius-server host
command. Leading spaces are ignored, but spaces
within and at the end of the key are used. If you use spaces in your key,
do not enclose the key in quotation marks unless the quotation marks are
part of the key.
Note
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01
69
Configuring RADIUS
Defining AAA Server Groups