topic Re: Cannot configure Radius in Network Access Control

Cannot configure Radius

anousakisioannis — Fri, 21 Feb 2020 18:53:34 GMT

Hello all,

In our network most if our devices are L3 switches 3850.

I am trying to set up Radius authentication, but i cannot as most of the commands that need for Radius are missing.

For example

R1(config)#radius-server host ?
% Unrecognized command
R1(config)#radius-server host

Any ideas? Should you think that is related with license level?

Let me know if you need any further details.

Regards,

Ioannis

Re: Cannot configure Radius

agrissimanis — Thu, 12 Apr 2018 09:32:50 GMT

You should use the following syntax:

radius server myserver
address ....
automate-tester ...
key ...

The "radius-server" style commands is the old way, no longer suppoted

Re: Cannot configure Radius

anousakisioannis — Thu, 12 Apr 2018 09:44:13 GMT

i tried it but commands are not available

R1(config)#rad?
% Unrecognized command
R1(config))#rad

Re: Cannot configure Radius

Seb Rupik — Thu, 12 Apr 2018 09:50:01 GMT

Have you enabled AAA? :

!
aaa new-model
!

Re: Cannot configure Radius

anousakisioannis — Thu, 12 Apr 2018 09:56:08 GMT

No, it's down.

Do you think that this is the reason?

In the same device i have the option to configure tacacs despite that aaa new-model command is disabled

Re: Cannot configure Radius

Seb Rupik — Thu, 12 Apr 2018 10:05:50 GMT

aaa new-model is listed as a per-requisite in the configuration guides for both RADIUS and TACACS.

I don't have a 3850 without AAA to test.

Re: Cannot configure Radius

anousakisioannis — Thu, 12 Apr 2018 11:09:24 GMT

Unfortunately, me neither can test it.

But if aaa new-model is needed for both methods, why i am able to configure tacasc?

Re: Cannot configure Radius

agrissimanis — Thu, 12 Apr 2018 12:39:32 GMT

Just tested on a new 3650, running 16.3.5b, IP Base

Without "aaa new-model":

tacacs-server (command for global TACACS server settings) - available

radius-server (command for global RADIUS server settings) - not available

tacacs server <name> (command for actually defining tacacs server) - not available

radius server <name> (command for actually defining radius server) - not available

With "aaa new-model" - all commands become available, as expected

Re: Cannot configure Radius

anousakisioannis — Thu, 12 Apr 2018 12:50:44 GMT

Thank you! That make sense..

Re: Cannot configure Radius

agrissimanis — Thu, 12 Apr 2018 13:06:20 GMT

No worries. Interesting that the TACACS command is available, but the RADIUS one isn't, without "aaa new-model"

Please rate if helpful