Cisco Nexus 5000 Series Switch CLI Software Configuration Guide, NX-OS 4.0(1a)N1 (OL-16597-01, January 2009)

Send feedback to [e-mail]
17-6
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 17 Configuring RADIUS
Configuring RADIUS Servers
The following example shows how to configure a RADIUS server host:
switch# configure terminal
switch(config)# radius-server host 10.10.1.1
switch(config)# exit
switch# show radius-server
switch# copy running-config startup-config
Configuring Global Preshared Keys
You can configure preshared keys at the global level for all servers used by the Nexus 5000 Series switch.
A preshared key is a shared secret text string between the Nexus 5000 Series switch and the RADIUS
server hosts.
To configure global preshared keys, obtain the preshared key values for the remote RADIUS servers and
perform this task:
:
The following example shows how to obtain the preshared key values for a remote RADIUS server:
switch# configure terminal
switch(config)# radius-server key 0 QsEfThUkO
switch(config)# exit
switch# show radius-server
switch# copy running-config startup-config
Configuring RADIUS Server Preshared Keys
You can configure preshared keys for a RADIUS server. A preshared key is a shared secret text string
between the Nexus 5000 Series switch and the RADIUS server host.
To configure radius server preshared keys, obtain the preshared key values for the remote RADIUS
servers and perform this task:
Command Purpose
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# radius-server key [0 |
7] key-value
Specifies a preshared key for all RADIUS servers. You
can specify a clear text (0) or encrypted (7) preshared
key. The default format is clear text. The maximum
length is 63 characters.
By default, no preshared key is configured.
Step 3
switch(config)# exit
Exits configuration mode.
Step 4
switch# show radius-server
(Optional) Displays the RADIUS server configuration.
Note The preshared keys are saved in encrypted
form in the running configuration. Use the
show running-config command to display the
encrypted preshared keys.
Step 5
switch# copy running-config
startup-config
(Optional) Copies the running configuration to the
startup configuration.