Configure RADIUS and TACACS+ authentication

Log in to the system as npadmin using the system's IP address or FQDN. For example:

$ ssh npadmin@10.1.0.1

Or,

$ ssh npadmin@exampleFQDN

Enter privileged mode:

npadmin@hostname > enable

Enter the admin password.

[sudo] password for npadmin: <password>

Enter configuration mode:

npadmin@hostname# configure system

Open the authentication configuration:

npadmin@hostname(config)# authentication
1: Authentication Method = pam
2: Configure Current Authentication Method
----------------------------------------
        
Q: Save changes and exit
C: Cancel changes and exit
        
Select which option you would like to change
using the index number:

Type 1 to open the authentication mechanism menu. When the menu appears, Enter 3 for RADIUS or 4 for TACACS+.

Authentication Mechanisms:
1: PAM
2: LDAP
3: RADIUS
4: TACACS+
5: Active Directory
6: PKI
7: PKI w/ LDAP
8: PKI w/ Active Directory

C: Cancel changes and exit

Select the authentication method to use:

When you have selected PKI or PKI w/ LDAP or PKI w/ Active Directory as the authentication method, the following options appear in the CLI:

1: Authentication Method = radius/tacacs
2: Configure Current Authentication Method
----------------------------------------

Q: Save changes and exit
C: Cancel changes and exit

Select which option you would like to change
using the index number:

Press 2 to select Configure Current Authentication Method. When the configuration menu appears, make changes to the following fields, as required:

1. RADIUS/TACACS+ Server(s): Enter 1 to enter a space-separated list of servers to authenticate against in <IP address><port> format.

   Note

   Only IP addresses are permitted for TACACS+ or RADIUS servers. DNS hostnames are not supported.

2. Shared Secret: Enter 2 to provide the shared secret key configured on the server for communication.

3. RADIUS/TACACS+ Timeout: Enter 3 to configure the server timeout in seconds.

   • For TACACS+, allowed value range is 0 - 60

   • For RADIUS, allowed value range is 0 - 255

   Enter Q to save the settings and exit the menu, or C to cancel.

See adding a user to create remote user(s) for RADIUS/TACACS authentication.