A simple Radius Config
the following script uses a NPS server as the Radius server. after logging in you will have full access to the device. it will fall back to the local user account if the NPS server is not on-line.
aaa new-model
!
aaa group server radius NPS_RADIUS_SERVERS
server-private 1.1.1.1 auth-port 1812 acct-port 1813 key cisco
!
aaa authentication login default group NPS_RADIUS_SERVERS local
aaa authorization console
aaa authorization exec default group NPS_RADIUS_SERVERS local if-authenticated
!
aaa session-id common