Configuring ISG as a RADIUS Proxy
Configuration Examples for ISG RADIUS Proxy
13
DETAILED STEPS
Configuration Examples for ISG RADIUS Proxy
This section contains the following examples:
• ISG RADIUS Proxy Configuration: Example, page 13
• ISG RADIUS Proxy and Layer 4 Redirect: Example, page 14
ISG RADIUS Proxy Configuration: Example
The following example configures ISG to serve as a RADIUS proxy and to send RADIUS packets to the
method list called RP. FastEthernet interface 0/0 is configured to initiate IP sessions upon receipt of
RADIUS packets.
!
aaa new-model
!
aaa group server radius EAP
server 10.2.36.253 auth-port 1812 acct-port 1813
!
aaa authorization radius-proxy RP group EAP
aaa accounting network FWDACCT start-stop group EAP
aaa accounting network FLOWACCT start-stop group EAP
!
aaa server radius proxy
session-identifier attribute 1
calling-station-id format msisdn
authentication port 1111
accounting port 2222
key radpro
message-authenticator ignore
! The method list "FWDACCT" was configured by the aaa accounting network FWDACCT
! start-stop group EAP command above.
Command or Action Purpose
Step 1
enable
Example:
Router> enable
Enables privileged EXEC mode.
• Enter your password if prompted.
Step 2
clear radius-proxy client ip-address
Example:
Router# clear radius-proxy client 10.10.10.10
Clears all ISG RADIUS proxy sessions that are associated
with the specified client device.
Step 3
clear radius-proxy session {id id-number | ip
ip-address}
Example:
Router# clear radius-proxy session ip
10.10.10.10
Clears a specific ISG RADIUS proxy session.
Note The ID can be found in the output of the show
radius-proxy client command.