Cisco Catalyst 2960-XR User Manual

PurposeCommand or Action
To configure the switch to recognize more than one host entry associated with a
single IP address, enter this command as many times as necessary, making sure
that each UDP port number is different. The switch software searches for hosts
in the order in which you specify them. Set the timeout, retransmit, and encryption
key values to use with the specific RADIUS host.
Enables AAA.aaa new-model
Example:
Switch(config)# aaa new-model
Step 3
Defines the AAA server-group with a group name.
aaa group server radius group-name
Step 4
Example:
Switch(config)# aaa group server
This command puts the switch in a server group configuration mode.
radius group1
Associates a particular RADIUS server with the defined server group. Repeat this
step for each RADIUS server in the AAA server group.
server ip-address
Example:
Switch(config-sg-radius)# server
Step 5
Each server in the group must be previously defined in Step 2.
172.20.0.1 auth-port 1000
acct-port 1001
Returns to privileged EXEC mode.end
Example:
Switch(config)# end
Step 6
Using Two Different RADIUS Group Servers
In this example, the switch is configured to recognize two different RADIUS group servers (group1 and
group2). Group1 has two different host entries on the same RADIUS server configured for the same services.
The second host entry acts as a fail-over backup to the first entry.
Switch(config)# radius-server host 172.20.0.1 auth-port 1000 acct-port 1001
Switch(config)# radius-server host 172.10.0.1 auth-port 1645 acct-port 1646
Switch(config)# aaa new-model
Switch(config)# aaa group server radius group1
Switch(config-sg-radius)# server 172.20.0.1 auth-port 1000 acct-port 1001
Switch(config-sg-radius)# exit
Switch(config)# aaa group server radius group2
Switch(config-sg-radius)# server 172.20.0.1 auth-port 2000 acct-port 2001
Switch(config-sg-radius)# exit
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
70 OL-29434-01
Configuring RADIUS
Defining AAA Server Groups

Cisco Catalyst 2960-XR Specifications

General

Stacking Bandwidth	80 Gbps
Layer Support	Layer 2 and Layer 3
Jumbo Frame Support	9198 bytes
RAM	512 MB
Input Voltage	100-240V AC
Model	Catalyst 2960-XR
Uplink Interfaces	4 x 1G SFP or 2 x 10G SFP+
Downlink Interfaces	24 or 48 x Gigabit Ethernet ports
Power Supply	Internal
MAC Address Table Size	16, 000 entries
PoE	Available on PoE models
Weight	4.5 kg
Features	energy efficiency
Stacking	Up to 8 switches
Operating Temperature	0 to 45°C