Allowing Users To Specify A Radius Server At Login - Cisco N5010P-N2K-BE Software Configuration Manual

Configuring RADIUS Servers
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
Command
Step 3
switch(config-radius)# server
{ipv4-address |ipv6-address |
server-name}
Step 4
switch(config-radius)# deadtime minutes
Step 5
switch(config-radius)# exit
Step 6
switch(config) #show radius-server group
[GROUP-NAME]
Step 7
switch(config)# copy running-config
startup-config
The following example shows how to configure a RADIUS server group:
switch# configure terminal
switch(config)# aaa group server radius RadServer
switch(config-radius)# server 10.10.1.1
switch(config-radius)# deadtime 30
switch(config-radius)# use-vrf management
switch(config-radius)# exit
switch(config)# show radius-server group
switch(config)# copy running-config startup-config

Allowing Users to Specify a RADIUS Server at Login

By default, the Nexus 5000 Series switch forwards an authentication request based on the default AAA
Note
authentication method. You can configure the Nexus 5000 Series switch to allow the user to specify a
VRF and RADIUS server to send the authenticate request by enabling the directed-request option. If you
enable this option, the user can log in as username@hostname, where hostname is the name of a
configured RADIUS server. User specified logins are only supported for Telnet sessions.
To allow users to specify a RADIUS server at login, perform this task:
Command
Step 1
switch# configure terminal
Step 2
switch(config)# switch(config)#
radius-server directed-request
Step 3
switch(config)# exit
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
17-8
Purpose
Configures the RADIUS server as a member of the
RADIUS server group.
Tip If the specified RADIUS server is not found,
configure it using the radius-server host
command and retry this command.
(Optional) Configures the monitoring dead time. The
default is 0 minutes. The range is from 1 through 1440.
If the dead-time interval for a RADIUS server
Note
group is greater than zero (0), that value takes
precedence over the global dead-time value.
See the example that shows how to configure
periodic RADIUS server monitoring.
Exits configuration mode.
(Optional) Displays the RADIUS server group
configuration.
(Optional) Copies the running configuration to the
startup configuration.
Purpose
Enters configuration mode.
Allows users to specify a RADIUS server to send the
authentication request when logging in. The default is
disabled.
Exits configuration mode.
Chapter 17 Configuring RADIUS
OL-16597-01