How to Configure RADIUS Change-of-Authorization
Command or Action
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3
aaa new-model
Example:
Switch(config)# aaa new-model
Step 4
aaa server radius dynamic-author
Example:
Switch(config)# aaa server radius
dynamic-author
Step 5
client {ip-address | name} [vrf vrfname]
[server-key string]
Step 6
server-key [0 | 7] string
Example:
Switch(config-sg-radius)# server-key
your_server_key
Step 7
port port-number
Example:
Switch(config-sg-radius)# port 25
Step 8
auth-type {any | all | session-key}
Example:
Switch(config-sg-radius)# auth-type any
Step 9
ignore session-key
Step 10
ignore server-key
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
974
Purpose
Enters the global configuration mode.
Enables AAA.
Configures the switch as an authentication, authorization, and
accounting (AAA) server to facilitate interaction with an external
policy server.
Enters dynamic authorization local server configuration mode and
specifies a RADIUS client from which a device will accept CoA
and disconnect requests.
Configures the RADIUS key to be shared between a device and
RADIUS clients.
Specifies the port on which a device listens for RADIUS requests
from configured RADIUS clients.
Specifies the type of authorization the switch uses for RADIUS
clients.
The client must match all the configured attributes for authorization.
(Optional) Configures the switch to ignore the session-key.
For more information about the ignore command, see the Cisco
IOS Intelligent Services Gateway Command Reference on
Cisco.com.
(Optional) Configures the switch to ignore the server-key.