Procedure
PurposeCommand or Action
Enters global configuration move.switch# configure terminal
Step 1
Creates a RADIUS server group and enters the RADIUS
server group configuration submode for that group.
switch (config)# aaa group server
radius group-name
Step 2
The group-name argument is a case-sensitive, alphanumeric
string with a maximum of 127 characters.
Configures the RADIUS server as a member of the RADIUS
server group.
switch (config-radius)# server
{ipv4-address | ipv6-address |
server-name}
Step 3
If the specified RADIUS server is not found, configure it
using the radius-server host command and retry this
command.
(Optional)
Configures the monitoring dead time. The default is 0
minutes. The range is from 1 through 1440.
switch (config-radius)# deadtime
minutes
Step 4
If the dead-time interval for a RADIUS server group
is greater than zero (0), that value takes precedence
over the global dead-time value.
Note
(Optional)
Assigns a source interface for a specific RADIUS server
group.
switch(config-radius)#
source-interface interface
Step 5
The supported interface types are management and VLAN.
Use the source-interface command to override the
global source interface assigned by the ip radius
source-interface command.
Note
Exits configuration mode.switch(config-radius)# exit
Step 6
(Optional)
Displays the RADIUS server group configuration.
switch(config)# show
radius-server group
[group-name]
Step 7
(Optional)
Saves the change persistenetly through reboots and restarts
by copying the running configuration to the startup
configuration.
switch(config)# copy
running-config startup-contig
Step 8
The following example shows how to configure a RADIUS server group:
switch# configure terminal
switch (config)# aaa group server radius RadServer
switch (config-radius)# server 10.10.1.1
switch (config-radius)# deadtime 30
switch (config-radius)# use-vrf management
switch (config-radius)# exit
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
36
Configuring RADIUS
Configuring RADIUS Server Groups