Radius Authentication Authorization and Accounting Example
Example 8-8 is a general configuration using RADIUS with the AAA command set. This configuration is shown in Figure 8-2.
Figure 8-2 General Configuration Using RADIUS
Figure 8-2 General Configuration Using RADIUS
192.168.1.15
Example 8-8 Sample RADIUS Configuration
|
NAS(config)#aaa new-model |
|
|
NAS(config)#radius-server host 192.168.100.15 |
|
|
NAS(config)#radius-server key ladyhawk |
|
|
NAS(config)#username meron password k0nj0 |
|
|
NAS(config)#aaa authentication ppp test1 radius local |
|
|
NAS(config)#aaa authorization network radius local |
|
|
NAS(config)#aaa accounting network start-stop radius |
|
|
NAS(config)#aaa authentication login admins local |
|
|
NAS(config)#aaa authorization exec local |
|
|
NAS(config)#line 1 8 |
|
|
NAS(config-line)#login authentication admins |
|
|
NAS(config)#interface group-async 1 |
|
|
NAS(config-line)#ppp authentication pap test1 |
The lines in this example RADIUS authentication, authorization, and accounting configuration are defined as follows:
■ The radius-server host command defines the IP address of the RADIUS server host.
■ The radius-server key command defines the shared secret text string between the network access server and the RADIUS server host.
■ The aaa authentication ppp testl radius local command defines the authentication method list, testl, which specifies that RADIUS authentication, then (if the RADIUS server does not respond) local authentication will be used on serial lines using PPP.
■ The ppp authentication pap test 1 command applies the test 1 method list to the lines specified.
■ The aaa authorization network radius local command is used to assign an address and other network parameters to the RADIUS user.
■ The aaa accounting network start-stop radius command tracks PPP usage.
■ The aaa authentication login admins local command defines another method list, admins, for login authentication.
■ The login authentication admins command applies the admins method list for login authentication to lines 1-8.
Continue reading here: Testing and Troubleshooting Radius Configuration
Was this article helpful?