Cisco Catalyst 2960-XR Security Configuration Manual page 92
Ios release 15.0 2 ex1
Hide thumbs
Also See for Catalyst 2960-XR:
- Configuration manual (196 pages) ,
- Configuration manuals (120 pages) ,
- Reference (52 pages)
Table of Contents
Advertisement
Defining AAA Server Groups
Command or Action
Step 3
aaa new-model
Example:
Switch(config)# aaa new-model
Step 4
aaa group server radius group-name
Example:
Switch(config)# aaa group server
radius group1
Step 5
server ip-address
Example:
Switch(config-sg-radius)# server
172.20.0.1 auth-port 1000
acct-port 1001
Step 6
end
Example:
Switch(config)# end
Using Two Different RADIUS Group Servers
In this example, the switch is configured to recognize two different RADIUS group servers (group1 and
group2). Group1 has two different host entries on the same RADIUS server configured for the same services.
The second host entry acts as a fail-over backup to the first entry.
Switch(config)# radius-server host 172.20.0.1 auth-port 1000 acct-port 1001
Switch(config)# radius-server host 172.10.0.1 auth-port 1645 acct-port 1646
Switch(config)# aaa new-model
Switch(config)# aaa group server radius group1
Switch(config-sg-radius)# server 172.20.0.1 auth-port 1000 acct-port 1001
Switch(config-sg-radius)# exit
Switch(config)# aaa group server radius group2
Switch(config-sg-radius)# server 172.20.0.1 auth-port 2000 acct-port 2001
Switch(config-sg-radius)# exit
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
70
Purpose
To configure the switch to recognize more than one host entry associated with a
single IP address, enter this command as many times as necessary, making sure
that each UDP port number is different. The switch software searches for hosts
in the order in which you specify them. Set the timeout, retransmit, and encryption
key values to use with the specific RADIUS host.
Enables AAA.
Defines the AAA server-group with a group name.
This command puts the switch in a server group configuration mode.
Associates a particular RADIUS server with the defined server group. Repeat this
step for each RADIUS server in the AAA server group.
Each server in the group must be previously defined in Step 2.
Returns to privileged EXEC mode.
Configuring RADIUS
OL-29434-01
Advertisement
Table of Contents
