cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2932
Views
5
Helpful
2
Replies
Highlighted
Beginner

Radius On Nexus 7K

Hi Guys,

When configuring radius on Nexus 7K i get following  error...Which is a bit weird.

radius-server host <IP> key 0 <key> auth-port 1645 acct-port 1646 authentication accounting

aaa group server radius RadServer

    server <IP>

    source-interface lo0

When configuring

aaa authentication login default group RadServer local

Error :

invalid server group could not update aaa configuration

Any help would be appreciated.

Regards,

niterid3r.

2 REPLIES 2
Highlighted
Beginner

You configured ( aaa authentication login default group RadServer local )

Try ( aaa authentication login default group RadServer )

From N7k Security Guide -

The local  keyword is not supported (and is not required) when configuring AAA  authentication groups because local authentication is the default if  remote servers are unreachable. For example, if you configure aaa authentication login default group g1, local authentication is tried if you are unable to authenticate using AAA group g1. In contrast, if you configure aaa authentication login default group g1 none, no authentication is performed if you are unable to authenticate using AAA group g1.

Reference:

http://www.cisco.com/en/US/docs/switches/datacenter/sw/6_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_6.x_chapter_0100.html#task_1247382

Highlighted

Yep, thats what it was, Thanks!