Cisco CRS User Manual page 76

server-private (RADIUS)
Command Modes
RADIUS server-group configuration
Command History
Release
Release 3.4.0
Usage Guidelines
Use the server-private command to associate a particular private server with a defined server group. Possible
overlapping of IP addresses between VRF instances are permitted. Private servers (servers with private
addresses) can be defined within the server group and remain hidden from other groups, while the servers in
the global pool (for example, default radius server group) can still be referred to by IP addresses and port
numbers. Thus, the list of servers in server groups includes references to the hosts in the configuration and
the definitions of private servers.
Both the auth-port and acct-port keywords enter RADIUS server-group private configuration mode.
Task ID
Task ID
aaa
Examples The following example shows how to define the group1 RADIUS group server, to associate private servers
with it, and to enter RADIUS server-group private configuration mode:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# aaa group server radius group1
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 timeout 5
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 retransmit 3
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 key coke
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 auth-port 300
RP/0/RP0/CPU0:router(config-sg-radius-private)# exit
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.2.2.2 timeout 5
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.2.2.2 retransmit 3
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.2.2.2 key coke
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.2.2.2 auth-port 300
RP/0/RP0/CPU0:router(config-sg-radius-private)#
Related Commands
Command
aaa group server tacacs+, on page 22
radius-server key , on page 51
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
66
Authentication, Authorization, and Accounting Commands
Modification
This command was introduced.
Operations
read, write
Description
Groups different RADIUS server hosts into distinct
lists and distinct methods.
Sets the authentication and encryption key for all
RADIUS communication between the router and the
RADIUS daemon.
OL-24740-01