RADIUS used-by limitations

[bfaltys]

It appears that, when configuring a RADIUS server, you can only select one of the options in the "used-by" portion of the command. This seems like an odd limitation. Am I missing something? Is it possible to use the same server for CLI & Web access authentication? It looks like if you try to add one it simply overwrites the other. I don't see the purpose of needing a separate server for each of those.

[bfaltys · Accepted solution]

Ok, I got it to work by adding "used-by cli" and then entering again for "used-by web".

radius server host <SERVER1-IP> key <KEY> used-by cli
radius server host <SERVER1-IP> key <KEY> used-by web
radius server host <SERVER2-IP> key <KEY> used-by cli
radius server host <SERVER2-IP> key <KEY> used-by web
radius enable

[Ludovico_Steven]

You have to create separate entries. In the long run it is cleaner, as you could end up with many used-by, not just cli and web, but eapol, ept, snmp..