Cisco AS5800 Specifications download pdf (Page 159)

4-21

Cisco AS5800 Operations, Administration, Maintenance, and Provisioning Guide

DOC-7810814=

Chapter 4 Administration

Access Service Security

RADIUS Authentication and Authorization Example

The following example shows a router configuration to authenticate and authorize using RADIUS.

aaa authentication login use-radius radius local

aaa authentication ppp user-radius if-needed radius

aaa authorization exec radius

aaa authorization network radius

These RADIUS authentication and authorization configuration commands are defined as follows:

• The aaa authentication login use-radius radius local command configures the router to use

RADIUS for authentication at the login prompt. If RADIUS returns an error, the user is

authenticated using the local database. In this example, use-radius is the name of the method list,

which specifies RADIUS and then local authentication.

• The aaa authentication ppp user-radius if-needed radius command configures the Cisco IOS

software to use RADIUS authentication for lines using Point-to-Point Protocol (PPP) with CHAP or

PAP if the user has not already been authorized. If the EXEC facility has authenticated the user,

RADIUS authentication is not performed. In this example, user-radius is the name of the method list

defining RADIUS as the if-needed authentication method.

• The aaa authorization exec radius command sets the RADIUS information that is used for EXEC

authorization, autocommands, and access lists.

• The aaa authorization network radius command sets RADIUS for network authorization, address

assignment, and access lists.

RADIUS Authentication, Authorization, and Accounting Example

The following sample is a general configuration using RADIUS with the AAA command set.

radius-server host 123.45.1.2

radius-server key myRaDiUSpassWoRd

username root password ALongPassword

aaa authentication ppp dialins radius local

aaa authorization network radius local

aaa accounting network start-stop radius

aaa authentication login admins local

aaa authorization exec local

line 1 16

autoselect ppp

autoselect during-login

modem ri-is-cd

interface group-async 1

encaps ppp

ppp authentication pap dialins

The lines in this sample RADIUS authentication, authorization, and accounting configuration are

defined as follows:

• radius-server host defines the IP address of the RADIUS server host.

• radius-server key defines the shared secret text string between the network Cisco AS5800 and the

RADIUS server host.

• aaa authentication ppp dialins radius local defines the authentication method list “dialins,” which

specifies that RADIUS authentication, then (if the RADIUS server does not respond) local

authentication will be used on serial lines using PPP.

• ppp authentication pap dialins applies the “dialins” method list to the lines specified.

1 2 ... 154 155 156 157 158 159 160 161 162 163 164 ... 333 334

Comments to this Manuals

No comments

Cisco AS5800 Specifications Page 159

Comments to this Manuals

Related products and manuals for Servers Cisco AS5800