Cisco Enhanced Radius Configuration Commands

All Commands are self explanatory, below is the sample configuration to enable radius authentication for the users to SSH/Telnet

aaa new-model

aaa group server radius IAS
server name IAS

radius server IAS
address ipv4 <IP_ADDRESS> auth-port 1812 acct-port 1813
key <Key-String>

aaa authentication login LOGIN local
aaa authentication login userAuthentication group IAS local
aaa authorization exec userAuthorization group IAS local if-authenticated
aaa authorization network userAuthorization group IAS local
aaa accounting exec default start-stop group IAS
aaa accounting system default start-stop group IAS
aaa session-id common
line vty 0
session-timeout 5
exec-timeout 0 0
timeout login response 100
authorization exec userAuthorization
login authentication userAuthentication
transport input ssh

Leave a comment