User's Manual

126
Users Manual of CS-6306R
6.2.5 RADIUS Configuration Examples
6.2.5.1 RADIUS Authentication and Authorization Example
The following example shows how to configure the router to authenticate and authorize using RADIUS:
aaa authentication login use-radius group radius local
The lines in this sample RADIUS authentication and authorization configuration are defined as follows: :
aaa authentication login use-radius radius local configures the router to use RADIUS for authentication at the
login prompt. If RADIUS returns an error, the user is authenticated using the local database. In this example,
use-radius is the name of the method list, which specifies RADIUS and then local authentication.
RADIUS Authentication, Authorization, and Accounting Example
The following example shows a general configuration using RADIUS with the AAA command set: :
radius-server host 1.2.3.4
radius-server key myRaDiUSpassWoRd
username root password AlongPassword
aaa authentication login admins radius local
line vty 1 16
login authentication admins
The lines in this example RADIUS authentication, authorization, and accounting configuration are defined as
follows:
radius-server host command defines the IP address of the RADIUS server host.；
radius-server key command defines the shared secret text string between the network access server and the
RADIUS server host.
aaa authentication login admins group radius local command defines the authentication method list "dialins,"
which specifies that RADIUS authentication and then (if the RADIUS server does not respond) local
authentication will be used on serial lines using PPP.；
login authentication admins command applies the "admins" method list for login authentication.
6.2.5.2 RADIUS Application Example
The following example shows how to define the general configuration through the AAA command set:
radius-server host 1.2.3.4
radius-server key myRaDiUSpassWoRd
username root password AlongPassword
aaa authentication login admins radius local
line vty 1 16
login authentication admins
In the example above, each command line has its own meaning. See the following content:
The command radius-server host defines the IP address of the RADIUS server.
The command radius-server key defines the shared pin between the network access server and the
RADIUS server.
The command aaa authentication login admins radius local defines the authentication method list admins,
which first specifies RADIUS as the authentication method and then uses the local authentication if the