Remote AAA RADIUS server configuration requirements

The user-supplied RADIUS server must:

  • Have an IPv4/IPv6 address or fully qualified domain name (FQDN) that is visible to the switch.

  • Have a passkey (shared secret) that matches what is configured on the switch.

  • Provide username and password definitions for every switch user. Remote users do not require definition on the switch.

  • Configure user role assignment using RADIUS attributes.
NOTE:

Consult your RADIUS server documentation for installation and general configuration details.

NOTE:

If SSH public key authentication is used, the key information is stored locally on the switch, making username and password definition on the RADIUS server unnecessary.