User Authentication

12-2

12
Web – Click Security, User Accounts. To configure a new user account, enter the
user name, access level, and password, then click Add. To change the password for
a specific user, enter the user name and new password, confirm the password by
entering it again, then click Apply.
Figure 12-1 User Accounts
CLI – Assign a user name to access-level 15 (i.e., administrator), then specify the
password.
Configuring Local/Remote Logon Authentication
Use the Authentication Settings menu to restrict management a ccess based on
specified user names and passwords. You can manually configure access rights on
the switch, or you can use a remote access authentication server based on RADIUS
or TACACS+ protocols.
Remote Authentication Dial-in User Service (RADIUS) and Terminal Access
Controller Access Control System Plus (TACACS+) are logon authentication
protocols that use software running on a central server to control access to
RADIUS-aware or TACACS- aware devices on the network. An authentication
server contains a database of multiple user name/password pairs with associated
privilege levels for each user that requires management a ccess to the switch.
Console(config)#username bob access-level 15 41-1
Console(config)#username bob password 0 smith
Console(config)#