RADIUS Configuration

Mr.Mayhem — Sun, 28 Nov 2021 15:06:21 GMT

Having difficulties finishing this lab, any help would be much appreciated. Not getting how to correctly set up radius server for user logins and how to restrict one vlan from accessing the other.

ROUTER

Building configuration...

Current configuration : 1796 bytes
!
version 15.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname R1
!
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
!
!
ip dhcp excluded-address 172.16.5.1 172.16.5.10
ip dhcp excluded-address 172.16.15.1 172.16.15.10
ip dhcp excluded-address 172.16.100.1 172.16.100.10
!
ip dhcp pool Student
network 172.16.5.0 255.255.255.0
default-router 172.16.5.1
ip dhcp pool Faculity
network 172.16.15.0 255.255.255.0
default-router 172.16.15.1
ip dhcp pool Management
network 172.16.100.0 255.255.255.0
default-router 172.16.100.1
!
!
aaa new-model
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
!
!
!
!
!
!
!
!
!
no ip domain-lookup
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface Loopback1
ip address 9.3.3.1 255.255.255.252
!
interface GigabitEthernet0/0/0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/0/0.5
encapsulation dot1Q 5
ip address 172.16.5.1 255.255.255.0
!
interface GigabitEthernet0/0/0.15
encapsulation dot1Q 15
ip address 172.16.15.1 255.255.255.0
!
interface GigabitEthernet0/0/0.100
encapsulation dot1Q 100 native
ip address 172.16.100.1 255.255.255.0
!
interface GigabitEthernet0/0/1
ip address 10.1.1.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/0/2
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
ip default-gateway 10.1.1.1
ip classless
ip route 10.1.1.0 255.255.255.0 GigabitEthernet0/0/0
ip route 0.0.0.0 0.0.0.0 Loopback1
!
ip flow-export version 9
!
!
!
!
radius-server host 10.1.1.2 auth-port 1812 key cisco
!
!
!
!
line con 0
password 7 0822455D0A16
!
line aux 0
!
line vty 0 4
password 7 0822455D0A16
line vty 5 15
password 7 0822455D0A16
!
!
!
end

SWITCH

Building configuration...

Current configuration : 2640 bytes
!
version 16.3.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname S1
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
!
!
!
!
!
!
no ip cef
no ipv6 cef
!
!
!
!
!
!
!
!
!
!
!
!
no ip domain-lookup
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet1/0/1
switchport trunk native vlan 100
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface GigabitEthernet1/0/2
switchport trunk native vlan 100
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface GigabitEthernet1/0/3
switchport trunk native vlan 100
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface GigabitEthernet1/0/4
switchport access vlan 100
switchport trunk native vlan 100
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface GigabitEthernet1/0/5
switchport access vlan 100
switchport trunk native vlan 100
switchport trunk encapsulation dot1q
switchport mode access
switchport nonegotiate
!
interface GigabitEthernet1/0/6
switchport access vlan 5
switchport mode access
switchport nonegotiate
!
interface GigabitEthernet1/0/7
switchport access vlan 15
switchport mode access
switchport nonegotiate
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
!
interface GigabitEthernet1/0/24
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface Vlan1
no ip address
shutdown
!
interface Vlan5
mac-address 0004.9a3a.4d01
ip address 172.16.5.1 255.255.255.0
!
interface Vlan15
mac-address 0004.9a3a.4d02
ip address 172.16.15.2 255.255.255.0
!
interface Vlan100
mac-address 0004.9a3a.4d03
ip address 172.16.100.2 255.255.255.0
!
ip default-gateway 172.16.100.1
ip classless
!
ip flow-export version 9

!
!
!
!
!
line con 0
password 7 0822455D0A16
login
!
line aux 0
!
line vty 0 4
password 7 0822455D0A16
login
line vty 5 15
password 7 0822455D0A16
login
!
!
!
!
end

Re: RADIUS Configuration

Haydn Andrews — Sun, 28 Nov 2021 22:12:23 GMT

Your missing telling the line and console to use the AAA Auth
aaa authentication login default local
line 1 4

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960cx_3650cx/software/release/15-2_3_e/configuration/guide/b_1523e_consolidated_2960cx_3560cx_cg/b_consolidated_152ex_2960-X_cg_chapter_0100101.pdf

topic RADIUS Configuration in Wireless

RADIUS Configuration

Re: RADIUS Configuration