vers are configured similarly. Most of the useful features are supplied in a single command. To accomplish the same sort of simple server configuration with a key, you can enter the following command: radius-server host 10.100.200.200 key Secret This will result in a configuration line that looks similar to this: radius-server host 10.100.200.200 auth-port 1645 acct-port 1646 key Secret Port 1645 is the default port for RADIUS and was added automatically by the router. AAA Authentication As with TACACS+, you can add multiple servers: radius-server host 10.100.200.200 auth-port 1645 acct-port 1646 key Secret radius-server host 10.100.200.201 auth-port 1645 acct-port 1646 key Secret2 Again, the second server will be accessed only if the first returns an error. Notice, how- ever, that with RADIUS you can have a different key for each server. TACACS+ only allows you to specify a global key for all servers. The commands for RADIUS servers are similar in NX-OS, though the order of keywords is shifted a bit: NX-5K-1 (config)# radius-server host 10.100.200.200 key secret auth-port 1645 acct-port 1646 NX-5K-1 (config)# radius-server host 10.100.200.201 key secret2 auth-port 1645 acct-port 1646 Custom groups Say you have two different sets of TACACS+ servers that you need to reference sepa- rately: two servers that you use for login authentication and two servers that you use for PPP authentication. IOS and NX-OS both let you specify custom groups for either RADIUS or TACACS+ servers. Use the aaa group server command to create these groups. Add the keyword tacacs+ or radius, followed by the name of the group you'd like to create. The com- mands are the same in IOS and NX-OS: aaa group server tacacs+ Login-Servers server 10.100.1.100 server 10.100.1.101 aaa group server radius PPP-Radius server 10.100.200.200 auth-port 1645 acct-port 1646 server 10.100.200.201 auth-port 1645 acct-port - 1646 Again, with RADIUS, the router adds the port numbers. The commands entered were simply: (config)#aaa group server radius PPP-Radius 1(