AAA step di configurazione switch/router Cisco via Radius

07.09 2022 | by massimiliano

---

AAA step di configurazione switch/router Cisco via Radius   aaa new-model aaa group server radius ISE-GROUP server name ise-01 server […]

AAA step di configurazione switch/router Cisco via Radius

 

aaa new-model

aaa group server radius ISE-GROUP

server name ise-01

server name ise-02

ip radius source-interface <vlan-id or interface>

!

aaa authentication login default group ISE-GROUP local

aaa authentication login CONSOLE local none

aaa authorization network default group ISE-GROUP

aaa authorization exec default group ISE-GROUP none

aaa authorization exec LOGIN local

!

radius server ise-01

address ipv4 <ip_address_server_radius1> auth-port 1812 acct-port 1813

key <key>

!

radius server ise-02

address ipv4 <ip_address_server_radius2> auth-port 1812 acct-port 1813

key <key>

!

line con 0

 login authentication CONSOLE

!

line vty 0 4

 transport input ssh

 !

line vty 5 15

 transport input ssh

!