Cisco CRS User Manual

Command Modes
RADIUS server-group configuration
Command History
ModificationRelease
This command was introduced.Release 3.4.0
Usage Guidelines
Use the server-private command to associate a particular private server with a defined server group. Possible
overlapping of IP addresses between VRF instances are permitted. Private servers (servers with private
addresses) can be defined within the server group and remain hidden from other groups, while the servers in
the global pool (for example, default radius server group) can still be referred to by IP addresses and port
numbers. Thus, the list of servers in server groups includes references to the hosts in the configuration and
the definitions of private servers.
Both the auth-port and acct-port keywords enter RADIUS server-group private configuration mode.
Task ID
OperationsTask ID
read, writeaaa
Examples
The following example shows how to define the group1 RADIUS group server, to associate private servers
with it, and to enter RADIUS server-group private configuration mode:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# aaa group server radius group1
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 timeout 5
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 retransmit 3
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 key coke
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.1.1.1 auth-port 300
RP/0/RP0/CPU0:router(config-sg-radius-private)# exit
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.2.2.2 timeout 5
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.2.2.2 retransmit 3
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.2.2.2 key coke
RP/0/RP0/CPU0:router(config-sg-radius)# server-private 10.2.2.2 auth-port 300
RP/0/RP0/CPU0:router(config-sg-radius-private)#
Related Commands
DescriptionCommand
Groups different RADIUS server hosts into distinct
lists and distinct methods.
aaa group server tacacs+, on page 22
Sets the authentication and encryption key for all
RADIUS communication between the router and the
RADIUS daemon.
radius-server key , on page 51
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
66 OL-24740-01
Authentication, Authorization, and Accounting Commands
server-private (RADIUS)

Cisco CRS Specifications

General

Operating System	Cisco IOS XR
Product Type	Core Router
Form Factor	Modular Chassis
Dimensions	Varies by chassis type
Weight	Varies by chassis type
Architecture	Distributed
Switch Fabric	Multi-stage
Interface Support	Ethernet, SONET/SDH, OTN
Interfaces/Ports	Varies by line card
Port Density	Varies by line card
Routing Protocol	BGP, IS-IS, OSPF, MPLS
Management	CLI, SNMP
Power Supply	Redundant, hot-swappable
Cooling	Redundant, Hot-swappable Fan Trays
Supported Protocols	IPv4, IPv6, MPLS
Management Interfaces	Ethernet, console
Security Features	ACLs