RADIUS LAB

CCNP SWITCH: Implementing Cisco IP Switched Networks

SWITCH v7.1 Chapter 7

© 2007 – 2016, Cisco Systems, Inc. All rights reserved. Cisco Public 1
 RADIUS LAB
 Configure telnet authentication on a Cisco 2811 router
 This Packet Tracer tutorial describes how to configure
RADIUS authentication on a Cisco 2811 router for telnet
access.
 Router R1 :
FastEthernet 0/0 : 192.168.1.1/24
FastEthernet 0/1 : 192.168.2.1/24
RADIUS Server : 192.168.1.2/24
Client (Laptop0) : 192.168.2.2/24

Chapter 7
© 2007 – 2016, Cisco Systems, Inc. All rights reserved. Cisco Public 2
 Configuring RADIUS Access

Chapter 7
© 2007 – 2016, Cisco Systems, Inc. All rights reserved. Cisco Public 3
 Configuring RADIUS Access
 IOS configuration on R1

The first command, aaa new-model,

tells the router that you are using either
aaa new-model
TACACS+ or RADIUS for
authentication.

Tells the router the IP address of the

radius-server host 192.168.1.2 key p@ssword
RADIUS server and the shared secret.

The aaa authentication command is

aaa authentication login default group radius local used to start RADIUS authentication on
the router as a defaul method for login.

line vty 0 15 Configuration of the vty interfaces for

login authentication default login

Chapter 7
© 2007 – 2016, Cisco Systems, Inc. All rights reserved. Cisco Public 4