topic Hi Francisco, in Network Access Control

Authentication devices with Windows Radius Server

Francisco Sanchez — Mon, 11 Mar 2019 06:43:00 GMT

I need help with configuration for authenticate with Windows Radius Server for use AAA configuration on the network device.

The Radius Server is Windows Server 2012.

The Switch are, 2960x, 3850, 3650

Routers are 2900, 3900, 4400

WLC 5760

Thanks for help

Regards

Hi Francisco,

Kanwaljeet Singh — Thu, 28 Apr 2016 16:02:57 GMT

Hi Francisco,

For configuring windows radius server please see if they below link helps:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/117641-config-asa-00.html

Please see section: Windows 2008 Server with NPS Configuration (hope it helps with win 2012)

For switches and routers to act as radius client , configuration is real simple and can be referenced from any user guide. I am pasting the link for your reference as well:

http://www.cisco.com/c/en/us/td/docs/ios/12_2/security/configuration/guide/fsecur_c/scfrad.html

Let me know if you have any questions.

Regards,

Kanwal

Note: Please mark answers if they are helpful.

Hi

Francisco Sanchez — Mon, 02 May 2016 20:49:46 GMT

I try but not work

Configuration on switch

aaa new-model
!
!
aaa group server radius SWITCH
server 10.10.2.3 auth-port 1645 acct-port 1646
!
aaa authentication login default group radius local enable
aaa authentication enable default group radius
aaa authorization console
aaa authorization exec default group radius local
aaa authorization network default group radius local
aaa accounting network default start-stop group radius
!
aaa session-id common
!
radius-server host 10.10.2.3 auth-port 1645 acct-port 1646 key cisco123

Hi Francisco,

Kanwaljeet Singh — Mon, 02 May 2016 23:01:34 GMT

Hi Francisco,

Can you please replace 'default group radius' with "default group SWITCH" and try again?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

Hi Fnu

Francisco Sanchez — Thu, 05 May 2016 18:33:09 GMT

Hi Fnu

I use only this commands

aaa new-model
!
!
aaa group server radius SWITCH
server 10.10.2.3 auth-port 1645 acct-port 1646
!
aaa authentication login default group SWITCH local enable
aaa authentication enable default group SWITCH

But when putting enable password does not work, I configure enable password and I use my password and does not work.

Regards