Cisco MDS 9000 Series Configuration Manual page 98

About Configuring Radius Server Groups
About Configuring Radius Server Groups
You can configure these server groups at any time but they only take effect when you apply them to an AAA
service. You configure AAA policies for CLI users or Fabric Manager or Device Manager users.
To configure a RADIUS server group, follow these steps:
Procedure
Step 1
switch# configure terminal
Enters configuration mode.
Step 2 switch(config)# aaa group server radius RadServer
switch(config-radius)#
Creates a server group named RadServer and enters the RADIUS server group configuration submode for
that group.
Step 3 switch(config)# no aaa group server radius RadServer
(Optional) Deletes the server group called RadServer from the authentication list.
Step 4 switch(config-radius)# server 10.71.58.91
Configures the RADIUS server at IPv4 address 10.71.58.91 to be tried first within the server group RadServer.
Tip
Step 5 switch(config-radius)# server 2001:0DB8:800:200C::417A
Configures the RADIUS server at IPv6 address 2001:0DB8:800:200C::417A to be tried first within the server
group RadServer.
Step 6 switch(config-radius)# no server 2001:0DB8:800:200C::417A
(Optional) Removes the RADIUS server at IPv6 address 2001:0DB8:800:200C::417A from the server group
RadServer.
Step 7
switch(config-radius)# exit
Returns to configuration mode.
Step 8 switch(config)# aaa group server radius RadiusServer
switch(config-radius)#
Creates a server group named RadiusServer and enters the RADIUS server group configuration submode for
that group.
Step 9
switch(config-radius)# server ServerA
Configures ServerA to be tried first within the server group called the RadiusServer1.
Tip
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
80
If the specified RADIUS server is not found, configure it using the radius-server host command
and retry this command.
If the specified RADIUS server is not found, configure it using the radius-server host command
and retry this command.
Configuring Security Features on an External AAA Server