AAA authentication problem

a.srivastav — Mon, 11 Mar 2019 01:05:42 GMT

Hi,

I have configured the cisco 2960 switch with AAA & the radius server is free radius. I am able to login into the switch when radius server is working.

But when radius server is not reachable, in that particular condition the switch doesn't move to local authentication configured on the switch.

Please check the below configuration of the switch & help me to sort out this issue.

aaa new-model
aaa group server radius radiuss
server 10.1.0.215 auth-port 1812 acct-port 1813
!
aaa authentication login default group radiuss enable
aaa authentication login CONSOLE local
aaa authentication enable default group radius
aaa authorization exec default group radius if-authenticated

radius-server host 10.1.0.215 auth-port 1812 acct-port 1813 key 7 071F285C422948514117171

radius-server retransmit 2

line con 0
exec-timeout 5 0
privilege level 15
password 7 14341B1B7D6F0417626173455E47060F
login authentication CONSOLE
line vty 0 4
access-class 91 in
exec-timeout 5 0
password 7 106D004F2C3B7B7F757E6A64812812d
transport input ssh
line vty 5 15
access-class 91 in
exec-timeout 5 0
password 7 106D000A061845jsajtqwkd327E6A64
transport input ssh

Thanks

Re: AAA authentication problem

Nicolas Darchis — Thu, 19 May 2011 05:59:25 GMT

aaa authentication login default group radiuss enable

you need to add "local" at the end if I'm not mistaken

topic Re: AAA authentication problem in Network Access Control

AAA authentication problem

Re: AAA authentication problem