Chapter 17
Configuring RADIUS
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
Command
Step 4
switch(config)# radius-server host
{ipv4-address | ipv6-address | host-name}
auth-port udp-port
Step 5
switch(config)# radius-server host
{ipv4-address | ipv6-address | host-name}
authentication
Step 6
switch(config)# exit
Step 7
switch(config)# show radius-server
Step 8
switch# copy running-config startup-config
The following example shows how to configure the accounting and authentication attributes for a
RADIUS server:
switch# configure terminal
switch(config)# radius-server host 10.10.1.1 acct-port 2004
switch(config)# radius-server host 10.10.1.1 accounting
switch(config)# radius-server host 10.10.2.2 auth-port 2005
switch(config)# radius-server host 10.10.2.2 authentication
switch(config)# exit
switch(config)# show radius-server
switch# copy running-config startup-config
Configuring Periodic RADIUS Server Monitoring
You can monitor the availability of RADIUS servers. These parameters include the username and
password to use for the server and an idle timer. The idle timer specifies the interval during which a
RADIUS server receives no requests before the Nexus 5000 Series switch sends out a test packet. You
can configure this option to test servers periodically.
For security reasons, we recommend that you do not configure a test username that is the same as an
Note
existing user in the RADIUS database.
The test idle timer specifies the interval during which a RADIUS server receives no requests before the
Nexus 5000 Series switch sends out a test packet.
The default idle timer value is 0 minutes. When the idle time interval is 0 minutes, the Nexus 5000 Series
Note
switch does not perform periodic RADIUS server monitoring.
OL-16597-01
Purpose
(Optional) Specifies a UDP port to use for RADIUS
authentication messages. The default UDP port is
1812. The range is from 0 to 65535.
(Optional) Specifies that the specified RADIUS
server only be used for authentication purposes. The
default is both accounting and authentication.
Exits configuration mode.
(Optional) Displays the RADIUS server
configuration.
(Optional) Copies the running configuration to the
startup configuration.
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Configuring RADIUS Servers
17-11