Restricting AAA by Realm

[rob.lemaster]

I have a multipurpose Radius server that already manages one Realm. I'd like to add another Realm for Administrators so that Administrators can use it for authentication on the routers. Currently, both Realms can authenticate on the router. How do I tell the router that it should only accept authentication requests from the Administrators Realm?

[owillins]

The following document explains how to define a default Kerberos realm.

http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800ca7ad.html#1001415