Ask the Cisco Kid! Your one stop for all the networking help you need.

Radius Authentication Nexus 1000v

One of the recent questions I have gotten is on Radius Authentication on a Nexus 1000v.  The nice thing about the 1000v is even though it is virtual it runs just like a physical cisco switch, so setting up Authentication is the same.  Here is the commands for my basic raidus configuration.

Radius First then Local Auth

aaa authentication banner # Unauthorized use is prohibited. #
aaa authentication fail-message # Failed login #
aaa authentication login default group radius local enable
aaa authentication login no_tacacs enable
aaa authorization network default group radius
aaa accounting exec default start-stop broadcast group radius

radius-server host IPADDRESSRADIUSSERVER auth-port AUTHPORT acct-port ACCTPORT key HOSTKEY

username myuser privilege 15 password mypass

Change to local Auth First then Radius

aaa authentication banner # Unauthorized use is prohibited. #
aaa authentication fail-message # Failed login #
aaa authentication login default group local radius enable
aaa authentication login no_tacacs enable
aaa authorization network default group radius
aaa accounting exec default start-stop broadcast group radius

radius-server host IPADDRESSRADIUSSERVER auth-port AUTHPORT acct-port ACCTPORT key HOSTKEY

username myuser privilege 15 password mypass