AAA + RADIUS on Catalyst Switchs

[roberto.martins]

The command "switch(config) radius-server ... " doesn´t appear on my catalyst 3500. The version of Catalyst IOS is c3500xl-c3h2s-mz.120.5.WC5

How I can define the RADIUS Server Ip address and port!?

Regards

[lgijssel · Accepted solution]

I think I have the same version. As you can see below, the command is there.

#sh ver

Cisco Internetwork Operating System Software

IOS (tm) C3500xl Software (C3500xl-C3H2S-M), Version 12.0(5)WC5, RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2002 by cisco Systems, Inc.

Compiled Tue 28-May-02 11:41 by devgoyal

Image text-base: 0x00003000, data-base: 0x0034A3C8

ROM: Bootstrap program is C3500xl boot loader

uptime is 40 weeks, 15 hours, 35 minutes

System returned to ROM by reload

System restarted at 23:17:01 MET-DST Mon Aug 19 2002

System image file is "flash:c3500xl-c3h2s-mz.120-5.WC5.bin"

cisco WS-C3524-XL (PowerPC403) processor (revision 0x01) with 8192K/1024K bytes

of memory.

Processor board ID FAB0513V068, with hardware revision 0x00

Last reset from warm-reset

Processor is running Enterprise Edition Software

Cluster command switch capable

Cluster member switch capable

24 FastEthernet/IEEE 802.3 interface(s)

2 Gigabit Ethernet/IEEE 802.3 interface(s)

32K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address: 00:05:9B:93:13:80

Motherboard assembly number: 73-3904-11

Power supply part number: 34-0851-02

Motherboard serial number: FAB051240RK

Power supply serial number: PHI050204Z8

Model revision number: A0

Model number: WS-C3524-XL-EN

System serial number: FAB0513V068

Configuration register is 0xF

#conf t

Enter configuration commands, one per line. End with CNTL/Z.

(config)#rad

(config)#radius-server ?

attribute Customize selected radius attributes

challenge-noecho Data echoing to screen is disabled during Access-Challenge

configure-nas Attempt to upload static routes and IP pools at startup

deadtime Time to stop using a server that doesn't respond

directed-request Allow user to specify radius server to use with `@server'

host Specify a RADIUS server

key encryption key shared with the radius servers

optional-passwords The first RADIUS request can be made without requesting a password

retransmit Specify the number of retries to active server

timeout Time to wait for a RADIUS server to reply

vsa Vendor specific attribute configuration

Hope this helps you out

Leo

[roberto.martins]

Thanks Leo for you attention!

Very strange. See below my sh version. Is realy the same version:

"switch#sh ver

Cisco Internetwork Operating System Software

IOS (tm) C3500xl Software (C3500xl-C3H2S-M), Version 12.0(5)WC5, RELEASE SOFTWAR

E (fc1)

Copyright (c) 1986-2002 by cisco Systems, Inc.

Compiled Tue 28-May-02 11:41 by devgoyal

Image text-base: 0x00003000, data-base: 0x0034A3C8

ROM: Bootstrap program is C3500xl boot loader

switch uptime is 44 minutes

System returned to ROM by power-on

System image file is "flash:/c3500xl-c3h2s-mz.120-5.WC5.bin"

cisco WS-C3512-XL (PowerPC403) processor (revision 0x01) with 8192K/1024K bytes

of memory.

Processor board ID FAB0514U061, with hardware revision 0x00

Last reset from power-on

Processor is running Enterprise Edition Software

Cluster command switch capable

Cluster member switch capable

12 FastEthernet/IEEE 802.3 interface(s)

2 Gigabit Ethernet/IEEE 802.3 interface(s)

32K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address: 00:04:9B:52:28:80

Motherboard assembly number: 73-4100-09

Power supply part number: 34-0851-02

Motherboard serial number: FAB051111CH

Power supply serial number: PHI050204F8

Model revision number: A0

Model number: WS-C3512-XL-EN

System serial number: FAB0514U061

Configuration register is 0xF"

You can see below that the command still doesn´t appear:

"switch#

switch#conf t

Enter configuration commands, one per line. End with CNTL/Z.

switch(config)#r?

rmon

switch(config)#radius-server?

% Unrecognized command"

switch(config)#

Do you have any idea of what´s happening!?

Thanks!

[lgijssel]

Not really an idea. Did you configure IP on int vlan 1and is AAA configured?

Otherwise, you have a 3512, mine is a 3524. Got it? It is hard to imagine but you never know with Cisco.

Goodluck,

Leo

[roberto.martins]

Ok. Thanks Leo,

Now is working!

Thanks for your attention!

Regards!

[esingleterry]

so how did you fix it??

[san1jay]

I had to do the following -

Config t

aaa new-model

end

copy run start

then the radius-server command appeared as expected.

[sisal]

Same happened to me with c3500XL-c3h2s-mz.120-5.WC3b.

no "copy run start", reloading etc...

I had to pass to c3500xl-c3h2s-mz.120-5.WC8