on the same RADIUS server are configured for the same service, for example, accounting, the second host
entry configured acts as an automatic switchover backup to the first one. Using this example, if the first host
entry fails to provide accounting services, the network access server tries the second host entry configured
on the same device for accounting services. (The RADIUS host entries are tried in the order they are configured.)
Task ID
OperationsTask ID
read, writeaaa
Examples
The following example shows how to use two different host entries on the same RADIUS server that are
configured for the same services—authentication and accounting. The second host entry configured acts as
switchover backup to the first one.
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# aaa group server radius group1
RP/0/RP0/CPU0:router(config-sg-radius)# server 1.1.1.1 auth-port 1645 acct-port 1646
RP/0/RP0/CPU0:router(config-sg-radius)# server 2.2.2.2 auth-port 2000 acct-port 2001
Related Commands
DescriptionCommand
Groups different RADIUS server hosts into distinct
lists and distinct methods.
aaa group server radius, on page 20
Configures the deadtime value at the RADIUS server
group level.
deadtime (server-group configuration), on page 28
Configures the IP address of the private RADIUS
server for the group server.
server-private (RADIUS), on page 65
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
62 OL-24740-01
Authentication, Authorization, and Accounting Commands
server (RADIUS)
To Next Page
Loading...
Need help?
General
