1-41# Configure the user interfaces to support SSH.[Switch-ui-vty0-4] protocol inbound ssh[Switch-ui-vty0-4] quit# Configure the RADIUS scheme.[Switch] radius scheme rad[Switch-radius-rad] primary authentication 10.1.1.1 1812[Switch-radius-rad] primary accounting 10.1.1.1 1813[Switch-radius-rad] key authentication expert[Switch-radius-rad] key accounting expert[Switch-radius-rad] user-name-format with-domain[Switch-radius-rad] quit# Specify the service type for the RADIUS server, which must be extended when the RADIUS serverruns iMC.[Switch-radius-rad] server-type extended[Switch-radius-rad] quit# Configure the AAA methods for the domain.[Switch] domain bbb[Switch-isp-bbb] authentication login radius-scheme rad[Switch-isp-bbb] authorization login radius-scheme rad[Switch-isp-bbb] accounting login radius-scheme rad[Switch-isp-bbb] quitWhen using SSH to log in, a user enters a username in the form userid@bbb for authentication usingdomain bbb.3) Verify the configurationAfter the above configuration, the SSH user should be able to use the configured account to access theuser interface of the switch. The commands that the user can access depend on the settings for EXECusers on the iMC server.Troubleshooting AAATroubleshooting RADIUSSymptom 1: User authentication/authorization always fails.Analysis:1) A communication failure exists between the NAS and the RADIUS server.2) The username is not in the format of userid@isp-name or no default ISP domain is specified for theNAS.3) The user is not configured on the RADIUS server.4) The password of the user is incorrect.5) The RADIUS server and the NAS are configured with different shared key.Solution:Check that:1) The NAS and the RADIUS server can ping each other.
