Administrative AAA Configuration Scenarios 63Natasha also adds the RADIUS server (r1) to the RADIUS server group sg1,and configures Telnet administrative users for authentication through thegroup. She types the following commands in this order:WX1200# set server group sg1 members r1success: change accepted.WX1200# set user admin attr service-type 6success: change accepted.WX1200# set authentication admin * sg1success: change accepted.WX1200# save configsuccess: configuration saved.If the service-type is not set to 6 (Administrative), the user will not be ableto enter “enable” mode commands.Authentication WhenRADIUS Servers DoNot RespondThis scenario illustrates how to enable RADIUS authentication for bothconsole and administrative users, but to unconditionally allow access foradministrative and console users if the RADIUS server (in this case, serverr1 in server group sg1) does not respond. To configure unconditionalauthentication, Natasha sets the authentication method to none. Shetypes the following commands in this order:WX1200# set user natasha password m@JorUser natasha createdWX1200# set radius server r1 address 192.168.253.1 keysunFLOW#$success: change accepted.WX1200# set server group sg1 members r1success: change accepted.WX1200# set authentication console * sg1 nonesuccess: change accepted.WX1200# set user admin attr service-type 6success: change accepted.WX1200# set authentication admin * sg1 nonesuccess: change accepted.WX1200# save configsuccess: configuration saved.
