Cisco Catalyst SD-WAN Remote Access Configuration Guide, Releases 26.x and Later

PDF

Cisco Catalyst SD-WAN Remote Access Configuration Guide, Releases 26.x and Later

Configure AAA parameters and RADIUS server parameters

Updated: March 10, 2026

Want to summarize with AI?

Log in

Configure AAA parameters and RADIUS server parameters using a CLI add-on template in Cisco SD-WAN Manager for the SD-WAN RA headend device.

This task configures AAA parameters and RADIUS server parameters to enable authentication, authorization, and accounting services for the SD-WAN RA headend device.

Use a CLI add-on template in Cisco SD-WAN Manager to configure both RADIUS server parameters and AAA method lists for your SD-WAN RA headend device.

Procedure

  1. Configure RADIUS server parameters.

    Example:

    aaa new-model 
aaa group server radius sdra_radius_grp 
server-private radius-ip key encr_key 
ip vrf forwarding radius-vrf

  2. Configure AAA method lists for authentication, authorization and accounting.

    Example:

    aaa authentication login sdra_authen_mlist group sdra_radius_grp 
aaa authorization network sdra_author_mlist group sdra_radius_grp 
aaa accounting network sdra_acc_mlist group sdra_radius_group

The AAA parameters and RADIUS server parameters are configured with the specified settings. The following example shows the complete configuration:

aaa new-model
aaa group server radius sdra_radius_group
server-private 10.0.8.100 key sdra-encr-key 
ip vrf forwarding 1
!
aaa authentication login sdra_authen_mlist group sdra_radius_grp
aaa authorization network sdra_author_mlist group sdra_radius_grp
aaa accounting network sdra_acc_mlist group sdra_radius_group