cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1095
Views
5
Helpful
1
Replies

RADIUS Configuration

Mr.Mayhem
Level 1
Level 1

Having difficulties finishing this lab, any help would be much appreciated. Not getting how to correctly set up radius server for user logins and how to restrict one vlan from accessing the other. 

 

ROUTER

Building configuration...

Current configuration : 1796 bytes
!
version 15.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname R1
!
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
!
!
ip dhcp excluded-address 172.16.5.1 172.16.5.10
ip dhcp excluded-address 172.16.15.1 172.16.15.10
ip dhcp excluded-address 172.16.100.1 172.16.100.10
!
ip dhcp pool Student
network 172.16.5.0 255.255.255.0
default-router 172.16.5.1
ip dhcp pool Faculity
network 172.16.15.0 255.255.255.0
default-router 172.16.15.1
ip dhcp pool Management
network 172.16.100.0 255.255.255.0
default-router 172.16.100.1
!
!
aaa new-model
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
!
!
!
!
!
!
!
!
!
no ip domain-lookup
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface Loopback1
ip address 9.3.3.1 255.255.255.252
!
interface GigabitEthernet0/0/0
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/0/0.5
encapsulation dot1Q 5
ip address 172.16.5.1 255.255.255.0
!
interface GigabitEthernet0/0/0.15
encapsulation dot1Q 15
ip address 172.16.15.1 255.255.255.0
!
interface GigabitEthernet0/0/0.100
encapsulation dot1Q 100 native
ip address 172.16.100.1 255.255.255.0
!
interface GigabitEthernet0/0/1
ip address 10.1.1.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/0/2
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
ip default-gateway 10.1.1.1
ip classless
ip route 10.1.1.0 255.255.255.0 GigabitEthernet0/0/0
ip route 0.0.0.0 0.0.0.0 Loopback1
!
ip flow-export version 9
!
!
!
!
radius-server host 10.1.1.2 auth-port 1812 key cisco
!
!
!
!
line con 0
password 7 0822455D0A16
!
line aux 0
!
line vty 0 4
password 7 0822455D0A16
line vty 5 15
password 7 0822455D0A16
!
!
!
end

SWITCH

Building configuration...

Current configuration : 2640 bytes
!
version 16.3.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname S1
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
!
!
!
!
!
!
no ip cef
no ipv6 cef
!
!
!
!
!
!
!
!
!
!
!
!
no ip domain-lookup
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet1/0/1
switchport trunk native vlan 100
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface GigabitEthernet1/0/2
switchport trunk native vlan 100
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface GigabitEthernet1/0/3
switchport trunk native vlan 100
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface GigabitEthernet1/0/4
switchport access vlan 100
switchport trunk native vlan 100
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
!
interface GigabitEthernet1/0/5
switchport access vlan 100
switchport trunk native vlan 100
switchport trunk encapsulation dot1q
switchport mode access
switchport nonegotiate
!
interface GigabitEthernet1/0/6
switchport access vlan 5
switchport mode access
switchport nonegotiate
!
interface GigabitEthernet1/0/7
switchport access vlan 15
switchport mode access
switchport nonegotiate
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
!
interface GigabitEthernet1/0/24
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface Vlan1
no ip address
shutdown
!
interface Vlan5
mac-address 0004.9a3a.4d01
ip address 172.16.5.1 255.255.255.0
!
interface Vlan15
mac-address 0004.9a3a.4d02
ip address 172.16.15.2 255.255.255.0
!
interface Vlan100
mac-address 0004.9a3a.4d03
ip address 172.16.100.2 255.255.255.0
!
ip default-gateway 172.16.100.1
ip classless
!
ip flow-export version 9

!
!
!
!
!
line con 0
password 7 0822455D0A16
login
!
line aux 0
!
line vty 0 4
password 7 0822455D0A16
login
line vty 5 15
password 7 0822455D0A16
login
!
!
!
!
end

1 Accepted Solution

Accepted Solutions

Your missing telling the line and console to use the AAA Auth 
aaa authentication login default local
line 1 4

login authentication default

 

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960cx_3650cx/software/release/15-2_3_e/configuration/guide/b_1523e_consolidated_2960cx_3560cx_cg/b_consolidated_152ex_2960-X_cg_chapter_0100101.pdf 

*****Help out other by using the rating system and marking answered questions as "Answered"*****
*** Please rate helpful posts ***

View solution in original post

1 Reply 1

Your missing telling the line and console to use the AAA Auth 
aaa authentication login default local
line 1 4

login authentication default

 

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960cx_3650cx/software/release/15-2_3_e/configuration/guide/b_1523e_consolidated_2960cx_3560cx_cg/b_consolidated_152ex_2960-X_cg_chapter_0100101.pdf 

*****Help out other by using the rating system and marking answered questions as "Answered"*****
*** Please rate helpful posts ***
Review Cisco Networking for a $25 gift card