Table of Contents
Advertisement
8.3.3 Configuring a RADIUS server group
Points to note
Configure a RADIUS server group to be used for authentication.
Set addresses to be used in a RADIUS server group from the addresses of the
RADIUS servers set by the
(general-use RADIUS servers).
Information about no more than four RADIUS servers can be set for a group.
Command examples
1.
(config)# radius-server host 192.168.10.1 key "AAAA1234"
(config)# radius-server host 192.168.10.2 key "BBBB1234"
(config)# radius-server host 192.168.10.3 key "CCCC1234"
(config)# radius-server host 192.168.10.4 key "DDDD1234"
(config)# radius-server host 192.168.10.5 key "EEEE1234"
(config)# radius-server host 192.168.10.6 key "FFFF1234"
(config)# radius-server host 192.168.10.7 key "GGGG1234"
(config)# radius-server host 192.168.10.8 key "HHHH1234"
Sets IP addresses of the general-use RADIUS servers and shared keys for
communication with those servers.
2.
(config)# aaa group server radius LOGIN-SEC
Sets the RADIUS server group name, and moves to RADIUS server group
configuration mode.
3.
(config-group)# server 192.168.10.1
(config-group)# server 192.168.10.2
(config-group)# server 192.168.10.7
(config-group)# server 192.168.10.8
(config-group)# exit
Sets addresses of the servers to be used in the group from the addresses of the
general-use RADIUS servers set by the
command.
Because the port number for authentication and the port number for accounting are
omitted in this example, 1812 is used for the port number for authentication and 1813
is used for the port number for accounting.
Notes
1.
2.
than one method, specify either of them and specify
radius-server host
For the group name set by the
command, we recommend that you use a capital letter for the first character.
Settings made by using the
when all the following conditions are met:
Values are the same as the
-
configuration (IP address, port number for authentication, and port
number for accounting).
The
radius-server host
-
same values as the
8 Login Security and RADIUS
configuration command
radius-server host
aaa group server radius
server
configuration command are valid only
radius-server host
command configuration is enabled with the
server
command configuration (the key parameter
local
.
configuration
configuration
command
95
Advertisement
Table of Contents
