Cisco Catalyst 2960-XR User Manual

How to Configure RADIUS
Identifying the RADIUS Server Host
To apply these settings globally to all RADIUS servers communicating with the switch, use the three unique
global configuration commands: radius-server timeout, radius-server retransmit, and radius-server key.
To apply these values on a specific RADIUS server, use the radius-server host global configuration command.
You can configure the switch to use AAA server groups to group existing server hosts for authentication. For
more information, see Related Topics below.
You also need to configure some settings on the RADIUS server. These settings include the IP address of the
switch and the key string to be shared by both the server and the switch. For more information, see the RADIUS
server documentation.
Before You Begin
If you configure both global and per-server functions (timeout, retransmission, and key commands) on the
switch, the per-server timer, retransmission, and key value commands override global timer, retransmission,
and key value commands. For information on configuring these settings on all RADIUS servers, see Related
Topics below.
SUMMARY STEPS
1.
configure terminal
2.
radius-server host {hostname | ip-address} [auth-port port-number] [acct-port port-number] [timeout
seconds] [retransmit retries] [key string]
3.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the IP address or hostname of the remote RADIUS server host.
radius-server host {hostname |
ip-address} [auth-port
Step 2
•
(Optional) For auth-port port-number, specify the UDP destination port for
authentication requests.
port-number] [acct-port
port-number] [timeout seconds]
[retransmit retries] [key string]
•
(Optional) For acct-port port-number, specify the UDP destination port for
accounting requests.
Example:
Switch(config)# radius-server
•
(Optional) For timeout seconds, specify the time interval that the switch waits for
the RADIUS server to reply before resending. The range is 1 to 1000. This setting
host 172.29.36.49 auth-port
overrides the radius-server timeout global configuration command setting. If no
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 65
Configuring RADIUS
How to Configure RADIUS

Cisco Catalyst 2960-XR Specifications

General

Brand	Cisco
Model	Catalyst 2960-XR
Category	Switch
Language	English