Security | 487
Define an AAA Method List to be Used for RADIUS
To configure RADIUS to authenticate or authorize users on the system, you must create an AAA method 
list. Default method lists do not need to be explicitly applied to the line, so they are not mandatory. 
To create a method list, enter one of the following commands in CONFIGURATION mode:
Apply the Method List to Terminal Lines
To enable RADIUS AAA login authentication for a method list, you must apply it to a terminal line. To 
configure a terminal line for RADIUS authentication and authorization, enter the following commands in 
CONFIGURATION mode:
Specify a RADIUS Server Host
When configuring a RADIUS server host, you can set different communication parameters, such as the 
UDP port, the key password, the number of retries, and the timeout. 
Command Syntax Command Mode Purpose
aaa authentication login 
method-list-name radius
CONFIGURATION Enter a text string (up to 16 characters long) as the name 
of the method list you wish to use with the RADIUS 
authentication method.
aaa authorization exec 
{method-list-name
 | default} radius 
tacacs+
CONFIGURATION Create methodlist with RADIUS and TACACS+ as 
authorization methods. Typical order of methods: 
RADIUS, TACACS+, Local, None. If authorization is 
denied by RADIUS, the session ends (radius should not 
be the last method specified).
Command Syntax Command Mode Purpose
line {aux 0 | console 0 | vty number 
[end-number]}
CONFIGURATION Enter the LINE mode. 
login authentication {method-list-name | 
default}
LINE Enable AAA login authentication for the specified 
RADIUS method list. This procedure is mandatory if 
you are not using default lists.
authorization exec methodlist CONFIGURATION To use the methodlist.