Cannot configure Radius

[anousakisioannis]

Hello all,

In our network most if our devices are L3 switches 3850.

I am trying to set up Radius authentication, but i cannot as most of the commands that need for Radius are missing.

For example

R1(config)#radius-server host ?
% Unrecognized command
R1(config)#radius-server host

Any ideas? Should you think that is related with license level?

Let me know if you need any further details.

Regards,

Ioannis

[agrissimanis]

You should use the following syntax:

radius server myserver
address ....
automate-tester ...
key ...

The "radius-server" style commands is the old way, no longer suppoted

[anousakisioannis]

i tried it but commands are not available 

R1(config)#rad?
% Unrecognized command
R1(config))#rad

[Seb Rupik]

Have you enabled AAA? :

!
aaa new-model
!

[anousakisioannis]

No, it's down.

Do you think that this is the reason?

In the same device i have the option to configure tacacs despite that aaa new-model command is disabled

[Seb Rupik]

aaa new-model is listed as a per-requisite in the configuration guides for both RADIUS and TACACS.

I don't have a 3850 without AAA to test.

[anousakisioannis]

Unfortunately, me neither can test it.

But if aaa new-model  is needed for both methods, why i am able to configure tacasc?

[agrissimanis]

Just tested on a new 3650, running 16.3.5b, IP Base

Without "aaa new-model":

tacacs-server (command for global TACACS server settings) - available

radius-server (command for global RADIUS server settings) - not available

tacacs server <name> (command for actually defining tacacs server) - not available

radius server <name> (command for actually defining radius server) - not available

With "aaa new-model" - all commands become available, as expected

[anousakisioannis]

Thank you! That make sense..

[agrissimanis]

No worries. Interesting that the TACACS command is available, but the RADIUS one isn't, without "aaa new-model"

Please rate if helpful