Hello ocporbust,
let's go on this :
aaa group server radius Radius
server x.x.x.x auth-port xxxx acct-port xxxx
server x.x.x.x auth-port xxxx acct-port xxxx
!
aaa authentication login Remote group radius enable
the last explained in the other post instructs the router to use an authentication method called Remote that uses Radius server group that is defined in the lines above and contains two servers : the first is used if not available the router will contact the second one.
! clock explained in other thread
! usage of first subnet when subnetting
ip subnet-zero
! enable ipv4 routing
ip routing
! define DNS server
ip name-server x.x.x.x
!
! enables STP in mode PVST+
spanning-tree mode pvst
! usage of a modified priority in each Vlan
spanning-tree extend system-id
!
Interface g0/1 is a routed port not a switching port.
standby = HSRP
the ip ospf cost is modified from 1 to 50
an OSPF process is configured
all interfaces are in area x.x.x.x
int gi0/3 cannot build OSPF adjacencies = passive
ip classless
! ip routing will use a default route
! for unknown subnets of net 10/8
Then:
the http server is disabled
packets sent to the radius server(s) use a source = Loop0's ip address
the same for the messages to the syslog
then access-list 99 is defined and used to define the source ip addresses that can send SNMP queries if they use the right community xx but only with read only rights RO.
other radius commands similar to the ones at the beginning
then ntp commands that are used to sync the clock with an external source
Hope to help
Giuseppe
