PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 2
Enables AAA.aaa new-model
Example:
Switch(config)# aaa new-model
Step 3
Configures the switch as an authentication, authorization, and
accounting (AAA) server to facilitate interaction with an external
policy server.
aaa server radius dynamic-author
Example:
Switch(config)# aaa server radius
Step 4
dynamic-author
Enters dynamic authorization local server configuration mode and
specifies a RADIUS client from which a device will accept CoA
and disconnect requests.
client {ip-address | name} [vrf vrfname]
[server-key string]
Step 5
Configures the RADIUS key to be shared between a device and
RADIUS clients.
server-key [0 | 7] string
Example:
Switch(config-sg-radius)# server-key
Step 6
your_server_key
Specifies the port on which a device listens for RADIUS requests
from configured RADIUS clients.
port port-number
Example:
Switch(config-sg-radius)# port 25
Step 7
Specifies the type of authorization the switch uses for RADIUS
clients.
auth-type {any | all | session-key}
Example:
Switch(config-sg-radius)# auth-type any
Step 8
The client must match all the configured attributes for authorization.
(Optional) Configures the switch to ignore the session-key.ignore session-key
Step 9
For more information about the ignore command, see the Cisco
IOS Intelligent Services Gateway Command Reference on
Cisco.com.
(Optional) Configures the switch to ignore the server-key.ignore server-key
Step 10
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
974
How to Configure RADIUS Change-of-Authorization