Defining Aaa Server Groups - Cisco 3845 - Security Bundle Router Software Manual

Controlling Switch Access with RADIUS
Command
Step 5
login authentication {default |
list-name}
Step 6
end
Step 7 show running-config
Step 8 copy running-config startup-config
To disable AAA, use the no aaa new-model global configuration command. To disable AAA
authentication, use the no aaa authentication login {default | list-name} method1 [method2...] global
configuration command. To either disable RADIUS authentication for logins or to return to the default
value, use the no login authentication {default | list-name} line configuration command.

Defining AAA Server Groups

You can configure the switch to use AAA server groups to group existing server hosts for authentication.
You select a subset of the configured server hosts and use them for a particular service. The server group
is used with a global server-host list, which lists the IP addresses of the selected server hosts.
Server groups also can include multiple host entries for the same server if each entry has a unique
identifier (the combination of the IP address and UDP port number), allowing different ports to be
individually defined as RADIUS hosts providing a specific AAA service. If you configure two different
host entries on the same RADIUS server for the same service, (for example, accounting), the second
configured host entry acts as a fail-over backup to the first one.
You use the server group server configuration command to associate a particular server with a defined
group server. You can either identify the server by its IP address or identify multiple host instances or
entries by using the optional auth-port and acct-port keywords.
Cisco ME 3800X and 3600X Switch Software Configuration Guide
8-24
Purpose
Apply the authentication list to a line or set of lines.
If you specify default, use the default list created with the aaa
•
authentication login command.
• For list-name, specify the list created with the aaa authentication
login command.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Chapter 8 Configuring Switch-Based Authentication
OL-23400-01