Configuring Radius - Cisco 10000-2P2-2DC Software Configuration Manual

10000 series
Table of Contents

Advertisement

Chapter 10
Configuring Address Pools
For an example of how to configure AAA, see
page

Configuring RADIUS

To configure RADIUS on the Cisco 10000 router, enter the following commands in global configuration
mode:
Command
Step 1
Router(config)# ip radius
source-interface subinterface-name
Step 2
Router(config)# radius-server host
ip-address auth-port port-number
acct-port port-number
Step 3
Router(config)# radius server attribute
32 include-in-access-req
Step 4
Router(config)# radius server attribute
44 include-in-access-req
Step 5
Router(config)# radius-server vsa send
accounting
Step 6
Router(config)# radius-server vsa send
authentication
Example 10-3
address pool obtains its subnets. The RADIUS server is located at the IP address 172.16.1.1.
Example 10-3 Configuring AAA and RADIUS
!
aaa new-model
!
aaa authorization configuration default group radius
aaa accounting network default start-stop group radius
aaa session-id common
!
ip subnet-zero
!
ip dhcp ping packets 0
!
ip dhcp pool Green
!
ip vrf Green
!
interface Ethernet1/1
OL-2226-23
10-9.
configures an address pool named Green and a RADIUS server from which the Green
vrf Green
utilization mark high 50
utilization mark low 30
origin aaa subnet size initial /28 autogrow /28
rd 300:1
route-target export 300:1
route-target import 300:1
ip address 172.16.1.12 255.255.255.0
duplex half
Example 10-3
in the
Purpose
Forces the Cisco 10000 router to use the IP address of the
specified interface for all outgoing RADIUS packets.
Specifies a RADIUS server host.
Sends RADIUS attribute 32 (NAS-Identifier) in an access request
or accounting request.
Sends RADIUS attribute 44 (Accounting Session ID) in an access
request or accounting request.
Configures the Cisco 10000 router, acting as the network access
server (NAS), to recognize and use vendor-specific accounting
attributes.
Configures the Cisco 10000 router (NAS) to recognize and use
vendor-specific authentication attributes.
Cisco 10000 Series Router Software Configuration Guide
On-Demand Address Pool Manager
"Configuring RADIUS" section on
10-9

Advertisement

Table of Contents
loading

This manual is also suitable for:

1000510008

Table of Contents