Configuring Radius; Setting The Radius Server Address - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Configuring RADIUS

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
No more server groups left = no response from any server in all server groups.
Note
No more servers left = no response from any server within this server group.
Configuring RADIUS
Cisco MDS 9000 Family switches can use the RADIUS protocol to communicate with remote AAA
servers. You can configure multiple RADIUS servers and server groups and set timeout and retry counts.
RADIUS is a distributed client/server protocol that secures networks against unauthorized access. In the
Cisco implementation, RADIUS clients run on Cisco MDS 9000 Family switches and send
authentication requests to a central RADIUS server that contains all user authentication and network
service access information.
This section defines the RADIUS operation, identifies its network environments, and describes its
configuration possibilities.

Setting the RADIUS Server Address

You can add up to 64 RADIUS servers. RADIUS keys are always stored in encrypted form in persistent
storage. The running configuration also displays encrypted keys.
To specify the host RADIUS server IPv4 address and other options, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# radius-server host 10.10.0.0
key HostKey
Step 3
switch(config)# radius-server host 10.10.0.0
auth-port 2003
Step 4
switch(config)# radius-server host 10.10.0.0
acct-port 2004
Step 5
switch(config)# radius-server host 10.10.0.0
accounting
Cisco MDS 9000 Family CLI Configuration Guide
34-8
Chapter 34 Configuring RADIUS and TACACS+
Purpose
Enters configuration mode.
Specifies the preshared key for the selected
RADIUS server. This key overrides the key
assigned using the radius-server key
command. In this example, the host is 10.10.0.0
and the key is HostKey.
Specifies the destination UDP port number to
which the RADIUS authentication messages
should be sent. In this example, the host is
10.10.0.0 and the authentication port is 2003.
The default authentication port is 1812, and the
valid range is 0 to 65366.
Specifies the destination UDP port number to
which RADIUS accounting messages should be
sent. The default accounting port is 1813, and
the valid range is 0 to 65366.
Specifies this server to be used only for
accounting purposes.
If neither the authentication nor the
Note
accounting options are specified, the
server is used for both accounting and
authentication purposes.
OL-18084-01, Cisco MDS NX-OS Release 4.x