PurposeCommand or Action
Configures the RADIUS key to be shared between a device and
RADIUS clients.
server-key [0 | 7] string
Example:
Switch(config-sg-radius)# server-key
Step 5
your_server_key
Specifies the port on which a device listens for RADIUS requests
from configured RADIUS clients.
port port-number
Example:
Switch(config-sg-radius)# port 25
Step 6
Specifies the type of authorization the switch uses for RADIUS
clients.
auth-type {any | all | session-key}
Example:
Switch(config-sg-radius)# auth-type any
Step 7
The client must match all the configured attributes for authorization.
(Optional) Configures the switch to ignore the session-key.ignore session-key
Step 8
For more information about the ignore command, see the Cisco IOS
Intelligent Services Gateway Command Reference on Cisco.com.
(Optional) Configures the switch to ignore the server-key.ignore server-key
Step 9
Example:
Switch(config-sg-radius)# ignore
For more information about the ignore command, see the Cisco IOS
Intelligent Services Gateway Command Reference on Cisco.com.
server-key
(Optional) Configures the switch to ignore a CoA request to
temporarily disable the port hosting a session. The purpose of
authentication command bounce-port ignore
Example:
Switch(config-sg-radius)# authentication
Step 10
temporarily disabling the port is to trigger a DHCP renegotiation
from the host when a VLAN change occurs and there is no supplicant
on the endpoint to detect the change.
command bounce-port ignore
(Optional) Configures the switch to ignore a nonstandard command
requesting that the port hosting a session be administratively shut
down. Shutting down the port results in termination of the session.
authentication command disable-port ignore
Example:
Switch(config-sg-radius)# authentication
Step 11
Use standard CLI or SNMP commands to re-enable the port.
command disable-port ignore
Returns to privileged EXEC mode.end
Example:
Switch(config-sg-radius)# end
Step 12
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
78 OL-29434-01
Configuring RADIUS
Configuring CoA on the Switch