Prerequisites For Radius; Guidelines And Limitations For Radius; Configuring Radius Servers - Cisco Nexus 5000 Series Configuration Manual

Vendor-Specific Attributes
• roles—Lists all the roles to which the user belongs. The value field is a string that lists the role names
• accountinginfo—Stores accounting information in addition to the attributes covered by a standard

Prerequisites for RADIUS

RADIUS has the following prerequisites:
• Obtain IPv4 or IPv6 addresses or host names for the RADIUS servers.
• Obtain preshared keys from the RADIUS servers.
• Ensure that the Cisco Nexus 5000 Series switch is configured as a RADIUS client of the AAA servers.

Guidelines and Limitations for RADIUS

RADIUS has the following guidelines and limitations:
• You can configure a maximum of 64 RADIUS servers on the Cisco Nexus 5000 Series switch.

Configuring RADIUS Servers

To configure RADIUS servers, perform this task:
SUMMARY STEPS
1. Establish the RADIUS server connections to the Cisco Nexus 5000 Series switch.
2. Configure the preshared secret keys for the RADIUS servers.
3. If needed, configure RADIUS server groups with subsets of the RADIUS servers for AAA authentication
methods.
4. If needed, configure any of the following optional parameters:
5. If needed, configure periodic RADIUS server monitoring.
DETAILED STEPS
Step 1
Establish the RADIUS server connections to the Cisco Nexus 5000 Series switch.
Step 2 Configure the preshared secret keys for the RADIUS servers.
Step 3 If needed, configure RADIUS server groups with subsets of the RADIUS servers for AAA authentication methods.
Step 4 If needed, configure any of the following optional parameters:
• Dead-time interval.
• Allow specification of a RADIUS server at login.
Cisco Nexus 5000 Series NX-OS Security Configuration Guide
26
delimited by white space.
RADIUS accounting protocol. This attribute is sent only in the VSA portion of the Account-Request
frames from the RADIUS client on the switch. It can be used only with the accounting protocol data
units (PDUs).
Prerequisites for RADIUS
OL-20919-01