Cisco CISCO1401 Software Guide - Page 141
no radius-server host, no aaa group, server radius, no server, aaa authorization, radius
![]() |
UPC - 746320202785
View all Cisco CISCO1401 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 141 highlights
Chapter 11 Configuring RADIUS and TACACS+ Servers Configuring and Enabling RADIUS To remove the specified RADIUS server, use the no radius-server host hostname | ip-address global configuration command. To remove a server group from the configuration list, use the no aaa group server radius group-name global configuration command. To remove the IP address of a RADIUS server, use the no server ip-address server group configuration command. In this example, the bridge is configured to recognize two different RADIUS group servers (group1 and group2). Group1 has two different host entries on the same RADIUS server configured for the same services. The second host entry acts as a fail-over backup to the first entry. BR(config)# aaa new-model BR(config)# radius-server host 172.20.0.1 auth-port 1000 acct-port 1001 BR(config)# radius-server host 172.10.0.1 auth-port 1645 acct-port 1646 BR(config)# aaa group server radius group1 BR(config-sg-radius)# server 172.20.0.1 auth-port 1000 acct-port 1001 BR(config-sg-radius)# exit BR(config)# aaa group server radius group2 BR(config-sg-radius)# server 172.20.0.1 auth-port 2000 acct-port 2001 BR(config-sg-radius)# exit Configuring RADIUS Authorization for User Privileged Access and Network Services AAA authorization limits the services available to a user. When AAA authorization is enabled, the bridge uses information retrieved from the user's profile, which is in the local user database or on the security server, to configure the user's session. The user is granted access to a requested service only if the information in the user profile allows it. Note This section describes setting up authorization for bridge adminsitrators. You can use the aaa authorization global configuration command with the radius keyword to set parameters that restrict a user's network access to privileged EXEC mode. The aaa authorization exec radius local command sets these authorization parameters: • Use RADIUS for privileged EXEC access authorization if authentication was performed by using RADIUS. • Use the local database if authentication was not performed by using RADIUS. Note Authorization is bypassed for authenticated users who log in through the CLI even if authorization has been configured. OL-4059-01 Cisco Aironet 1400 Series Wireless Bridges Software Configuration Guide 11-11
![](/manual_guide/products/cisco-cisco1401-software-guide-337473e/141.png)