Radius On Nexus 7K

[niterid3r]

Hi Guys,

When configuring radius on Nexus 7K i get following  error...Which is a bit weird.

radius-server host <IP> key 0 <key> auth-port 1645 acct-port 1646 authentication accounting

aaa group server radius RadServer

    server <IP>

    source-interface lo0

When configuring

aaa authentication login default group RadServer local

Error :

invalid server group could not update aaa configuration

Any help would be appreciated.

Regards,

niterid3r.

[vsathiam]

You configured ( aaa authentication login default group RadServer local )

Try ( aaa authentication login default group RadServer )

From N7k Security Guide -

The local  keyword is not supported (and is not required) when configuring AAA  authentication groups because local authentication is the default if  remote servers are unreachable. For example, if you configure aaa authentication login default group g1, local authentication is tried if you are unable to authenticate using AAA group g1. In contrast, if you configure aaa authentication login default group g1 none, no authentication is performed if you are unable to authenticate using AAA group g1.

Reference:

http://www.cisco.com/en/US/docs/switches/datacenter/sw/6_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_6.x_chapter_0100.html#task_1247382

[dagyb]

Yep, thats what it was, Thanks!