The correct way to configure radius groups for Dot1X

[SMD28316]

I am confused about RADIUS groups, for Dot1X I would like to add my RADIUS servers by IP to ISE group, like this:

aaa group server radius ISE
 server <ip_address_1> auth-port 1812 acct-port 1813
 server <ip_address_2> auth-port 1812 acct-port 1813
 deadtime 3
!

My question is how do I add the RADIUS keys? Do I have to configure the RADIUS servers again like this:

radius-server host <ip_address> auth-port 1812 acct-port 1813 key <KEY>

If so what is the point of adding the servers by IP to the radius group? if I configured the radius server as in the second command, will it be in the default RADIUS group as well?

[balaji.bandi]

I follow as below :

radius server ISE1
 address ipv4 ip address of ISE 1  auth-port 1812 acct-port 11813
 key SECRET
radius server ISE2
 address ipv4 ip address of ISE 2  auth-port 1812 acct-port 11813
 key SECRET

Add a AAA Group for RADIUS referencing the ISE server

aaa group server radius ISE-Group
server name ISE1
server name ISE2

[thomas · Accepted solution]

https://cs.co/ise-resources > ISE Secure Wired Access Prescriptive Deployment Guide

aaa new-model
aaa session-id common
!
radius server ISE01
 address ipv4 172.20.254.21 auth-port 1812 acct-port 1813
 automate-tester username test-user ignore-acct-port probe-on
 key ISEisC00L
!
radius server ISE02
 address ipv4 172.20.254.22 auth-port 1812 acct-port 1813
 automate-tester username test-user ignore-acct-port probe-on
 key ISEisC00L
!