Cisco Systems 6500 set authentication login

2-220

Catalyst 6500 Series Switch Command Reference—Release8.1

78-15474-01

Chapter2 Catalyst 6500 Series Switch and ROM Monitor Commands set authentication login

set authentication login

To enable TACACS+, RADIUS, or Kerberos as the authentication method for login, use the set

authentication login command.

set authentication login {radius | tacacs | kerberos} enable [console | telnet | http | all]

[primary]

set authentication login {radius | tacacs | kerberos} disable [console | telnet | http | all]

set authentication login {enable | disable} [console | telnet | http | all]

set authentication login local {enable | disable} [console | telnet | http | all]

set authentication login attempt count [console | telnet]

set authentication login lockout time [console | telnet]

Syntax Description

Defaults Local authentication is the primary authentication method for login.

Command Types Switch command.

Command Modes Privileged.

radius Specifies the use of the RADIUS server password to determine if you have

access permission to the switch.

tacacs Specifies the use of the TACACS+ server password to determine if you have

access permission to the switch.

kerberos Specifies the Kerberos server password to determine if you have access

permission to the switch.

enable Enables the specified authentication method for login.

console (Optional) Specifies the authentication method for console sessions.

telnet (Optional) Specifies the authentication method for Telnet sessions.

http (Optional) Specifies the authentication method for HTTP sessions.

all (Optional) Specifies the authentication method for all session types.

primary (Optional) Specifies that the method specified is the primary authentication

method for login.

disable Disables the specified authentication method for login.

local Specifies a local password to determine if you have access permission to the

switch.

attempt

count Specifies the number of login attempts before initiating an error; valid values

are 0, from 3 to 10, and 0 to disable.

lockout

time Specifies the lockout timeout; valid values are from 30 to 43200 seconds, and

0 to disable.

Contents

Main Page CONTENTS Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Preface Audience Organization Related Documentation Conventions Obtaining Documentation Cisco.com Documentation CD-ROM Ordering Documentation Documentation Feedback Obtaining Technical Assistance Cisco TAC Website Opening a TAC Case TAC Case Priority Definitions Obtaining Additional Publications and Information Page CHAPTER Command-Line Interfaces Switch CLI Accessing the Switch CLI Accessing the Switch CLI via the Console Port (EIA/TIA-232) Accessing the Switch CLI via Telnet Operating the Switch CLI Accessing the Command Modes Using Command-Line Processing Using the Command-Line Editing Features Moving Around on the Command Line Completing a Partial Command Name Pasting in Buffer Entries Editing Command Lines That Wrap Deleting Entries Scrolling Down a Line or a Screen Scrolling to Specified Text Redisplaying the Current Command Line Transposing Mistyped Characters Controlling Capitalization Designating a Keystroke as a Command Entry Using Command Aliases Using History Substitution 1-9 Accessing Command Help Top-Level Commands and Command Categories Command Categories Context-Sensitive Help Designating Modules, Ports, and VLANs Designating MAC Addresses, IP and IPX Addresses, and IP Aliases Using Command Completion Features Using Command Self-Repeat Using Keyword Lookup Using Partial Keyword Lookup Using Command Completion Using the CLI String Search Regular Expressions Single-Character Patterns Page Multiple-Character Patterns Multipliers Alternation Anchoring ROM Monitor CLI Accessing the ROM Monitor CLI Operating the ROM Monitor CLI Page CHAPTER Catalyst 6500 Series Switch and ROM Monitor Commands alias Page boot cd clear acllog clear alias clear arp clear banner motd clear boot auto-config clear boot device clear boot system clear cam clear cam notification clear channel statistics clear config Page clear config pvlan clear cops Page clear counters clear crypto key rsa clear dot1x config clear ftp clear gmrp statistics clear gvrp statistics clear igmp statistics clear ip alias clear ip dns domain clear ip dns server clear ip permit Page clear ip route clear kerberos clients mandatory clear kerberos credentials forward clear kerberos creds clear kerberos realm clear kerberos server clear key config-key clear l2protocol-tunnel cos clear l2protocol-tunnel statistics clear lacp-channel statistics clear lda Page clear localuser clear log clear log command clear logging buffer clear logging callhome Page clear logging callhome from clear logging callhome reply-to clear logging callhome severity clear logging callhome smtp-server clear logging level Page clear logging server clear mls cef clear mls cef rpf statistics clear mls entry Page clear mls entry cef clear mls exclude protocol clear mls multicast statistics clear mls nde flow clear mls statistics Page clear mls statistics entry Page clear module password clear multicast router clear ntp server clear ntp timezone clear pbf clear pbf-map Page clear pbf vlan clear port broadcast clear port cops clear port host clear port qos cos clear port security clear pvlan mapping clear qos acl Page clear qos config clear qos cos-dscp-map clear qos dscp-cos-map clear qos dscp-mutation-table-map clear qos ipprec-dscp-map clear qos mac-cos clear qos map Page clear qos policed-dscp-map clear qos policer Page clear qos statistics clear radius clear rcp clear rgmp statistics clear security acl Page clear security acl capture-ports clear security acl log flow clear security acl map Page clear snmp access clear snmp access-list clear snmp community clear snmp community-ext clear snmp group clear snmp ifalias clear snmp notify clear snmp targetaddr clear snmp targetparams clear snmp trap clear snmp user clear snmp view clear spantree detected-protocols clear spantree mst clear spantree portcost clear spantree portinstancecost Page clear spantree portinstancepri clear spantree portpri clear spantree portvlancost Page clear spantree portvlanpri clear spantree root Page clear spantree statistics Page clear spantree uplinkfast clear system info-log command clear tacacs key clear tacacs server clear timezone clear top clear trunk clear vlan Page clear vlan counters clear vlan mapping clear vmps rcp clear vmps server clear vmps statistics clear vtp pruneeligible clear vtp statistics commit Page commit lda configure 2-154 Related Commands co py show config confreg 2-156 Related Commands show boot context 2-158 copy Page 2-161 These examples show how to use the copy command to download a configuration from a TFTP server: 2-162 This example shows how to copy the running configuration to an rcp server for storage: 2-163 This example shows how to upload an image from a remote host into Flash using an rcp server: This example shows how to copy the ACL configuration to a bootflash file manually: Page delete dev dirROM monitor dirswitch Page disable disconnect download Page 2-174 This example shows how to download a ROM image to module 9: 2-175 This example shows how to upgrade the EPLD image in force mode on the module in slot 5: enable format Page frame fsck Page historyROM monitor historyswitch l2trace Page Page meminfo ping Page Page pwd quit reconfirm vmps reload repeat 2-196 resetROM monitor resetswitch Page Page Page 2F2 restore counters rollback session set set accounting commands set accounting connect set accounting exec Page set accounting suppress set accounting system Page set accounting update set acllog ratelimit set alias set arp Page set authentication enable Page set authentication login Page set authorization commands Page set authorization enable Page set authorization exec Page set banner lcd set banner motd set banner telnet set boot auto-config set boot config-register Page Page set boot config-register auto-config Page Page set boot device Page set boot sync now set boot system flash Page set cam Page set cam notification Page Page set cdp Page set channelprotocol Page set channel vlancost Page set config acl nvram set config mode Page set cops Page set crypto key rsa set default portstatus set dot1q-all-tagged set dot1x Page Page set enablepass set errdisable-timeout Page set errordetection Page set fan-tray-version set feature agg-link-partner set feature dot1x-radius-keepalive set feature mdg set firewall set ftp Page set garp timer set gmrp set gmrp fwdall set gmrp registration set gmrp timer Page set gvrp set gvrp applicant set gvrp dynamic-vlan-creation set gvrp registration Page set gvrp timer Page set igmp set igmp fastblock set igmp fastleave set igmp flooding set igmp leave-query-type set igmp mode set igmp querier Page set igmp ratelimit Page set igmp v3-processing Page set inlinepower defaultallocation set interface Page Page set ip alias set ip dns set ip dns domain set ip dns server set ip fragmentation set ip http port set ip http server set ip permit Page set ip redirect set ip route 2-317 Related Commands clear ip route show ip route set ip unreachable set kerberos clients mandatory set kerberos credentials forward set kerberos local-realm set kerberos realm set kerberos server set kerberos srvtab entry Page set kerberos srvtab remote set key config-key set l2protocol-tunnel cos set l2protocol-tunnel trunk set lacp-channel system-priority set lcperroraction set lda Page Page set length set localuser Page set logging buffer set logging callhome Page set logging callhome destination Page set logging callhome from set logging callhome reply-to set logging callhome severity Page set logging callhome smtp-server set logging console set logging history set logging level Page Page set logging server Page set logging session set logging telnet set logging timestamp set logout set mls agingtime Page Page set mls bridged-flow-statistics set mls cef load-balance set mls cef per-prefix-statistics set mls exclude protocol set mls flow Page set mls nde Page Page Page set mls rate set mls statistics protocol set mls verify Page set module Page set module name set module power set module shutdown set msfcautostate set msmautostate set multicast router set ntp broadcastclient set ntp broadcastdelay set ntp client set ntp server set ntp summertime Page set ntp timezone set password set pbf Page set pbf-map Page set pbf vlan set port arp-inspection set port auxiliaryvlan Page set port broadcast Page set port channel Page Page Page set port cops set port debounce Page set port disable set port dot1q-all-tagged Page set port dot1qtunnel Page set port dot1x Page Page set port duplex set port enable set port errdisable-timeout set port flowcontrol Page set port gmrp set port gvrp Page set port host set port inlinepower Page set port jumbo set port l2protocol-tunnel Page set port lacp-channel Page set port macro 2-434 This example shows how to execute the Cisco Softphone configuration macro: Page set port membership Page set port name set port negotiation set port protocol Page set port qos Page set port qos autoqos Page set port qos cos set port qos policy-source Page set port qos trust Page set port qos trust-device set port qos trust-ext set port rsvp dsbm-election set port security Page Page set port speed set port sync-restart-delay set port trap set port unicast-flood Page set port voice interface dhcp Page set port vtp set power redundancy set prompt set protocolfilter set pvlan Page set pvlan mapping Page set qos set qos acl default-action Page Page set qos acl ip Page Page Page Page set qos acl ipx Page Page set qos acl mac Page set qos acl map Page set qos autoqos set qos bridged-microflow-policing set qos cos-dscp-map set qos drop-threshold Page set qos dscp-cos-map set qos dscp-mutation-table-map set qos ipprec-dscp-map Page set qos mac-cos set qos map Page Page set qos policed-dscp-map set qos policer Page set qos policy-source Page set qos rsvp Page set qos rxq-ratio Page set qos statistics export set qos statistics export aggregate set qos statistics export destination set qos statistics export interval set qos statistics export port set qos txq-ratio Page set qos wred Page set qos wrr Page set radius attribute set radius deadtime set radius key set radius retransmit set radius server set radius timeout set rcp username set rgmp set rspan Page Page set security acl adjacency set security acl arp-inspection Page set security acl capture-ports set security acl feature ratelimit set security acl ip Page Page Page Page Page set security acl ipx Page Page set security acl log Page set security acl mac Page set security acl map Page set snmp set snmp access Page set snmp access-list Page set snmp buffer set snmp chassis-alias set snmp community Page set snmp community-ext Page set snmp extendedrmon netflow set snmp group set snmp ifalias set snmp notify set snmp rmon set snmp rmonmemory set snmp targetaddr Page set snmp targetparams Page set snmp trap Page Page set snmp user Page set snmp view Page set span Page Page set spantree backbonefast set spantree bpdu-filter set spantree bpdu-guard set spantree bpdu-skewing set spantree channelcost Page set spantree channelvlancost set spantree defaultcostmode Page set spantree disable Page set spantree enable Page set spantree fwddelay Page set spantree global-default Page set spantree guard Page set spantree hello Page set spantree link-type set spantree macreduction set spantree maxage Page set spantree mode Page set spantree mst set spantree mst config Page set spantree mst link-type set spantree mst maxhops set spantree mst vlan set spantree portcost Page set spantree portfast set spantree portfast bpdu-filter set spantree portfast bpdu-guard set spantree portinstancecost Page set spantree portinstancepri Page set spantree portpri set spantree portvlancost Page Page set spantree portvlanpri Page set spantree priority Page set spantree root Page Page set spantree uplinkfast Page set summertime Page set system baud set system contact set system core-dump set system core-file set system countrycode set system crossbar-fallback set system highavailability set system highavailability versioning Page set system info-log Page set system location set system modem set system name set system supervisor-update Page set system switchmode allow Page set system syslog-dump set system syslog-file set tacacs attempts set tacacs directedrequest set tacacs key set tacacs server set tacacs timeout set test diagfail-action set test diaglevel set time set timezone set traffic monitor set trunk Page Page set udld Page set udld aggressive-mode set udld interval set vlan Page Page Page Page set vlan mapping Page set vlan verify-port-provisioning set vmps downloadmethod set vmps downloadserver set vmps server Page set vmps state set vtp Page Page Page set vtp pruneeligible show accounting 2-696 This example shows the configuration details of a switch with TACACS+ accounting enabled: Page show acllog show aclmerge algo show alias show arp show authentication show authorization show banner show boot show boot device show cam 2-708 Examples This example shows how to display dynamic CAM entries for all V LANs : This example shows how to display dynamic CAM entries for VLAN 1: This example shows routers listed as the CAM entries: Page show cam agingtime show cam count show cam msfc show cam notification 2-714 This example shows how to display CAM notification information for ports 1-6 on modu le 2: This example shows how to display CAM notification intervals: This example shows how to display CAM notification history information: This example shows how to display CAM notification history size information: Page show cdp 2-717 This example shows how to display CDP information about neighboring systems: This example shows how to display duplex information about neighboring systems: This example shows how to display VLAN information about neighboring systems: 2-718 This example shows how to display capability information about neighboring system s: Related Commands se t cd p This example shows how to display CDP information for all ports: show channel 2-720 This example shows how to display channel information for all channels: This example shows how to display port information for a specific channel: This example shows how to display port information for all channels: 2-721 This example shows how to display PAgP information for all channels: This example shows how to display PAgP information for a specific channel: This example shows how to display statistics for a specific channel: 2-722 This example shows how to display statistics for all channels: 2-723 Related Commands show channel group show port channel show channel group 2-725 This example shows how to display group information: 2-726 2-727 Related Commands show channel show port channel show channel hash Page show channel mac show channelprotocol show channel traffic show config 2-734 2-735 2-736 This example shows how to display default and nondefault configuration information: 2-737 This example shows how to display nondefault system configuration information: This example shows how to display all system default and nondefault configuration inf orm ati on : This example shows how to display module nondefault configuration information: Page show config mode show config qos acl show cops 2-742 This example shows how to display COPS RSVP status and configuration information: This example shows how to display the ports assigned to each role: This example shows how to display only IP addresses, not IP aliases: Page show counters 2-745 This example shows how to display the counters for the supervisor engine: Page Page Page Page show crypto key show default show dot1q-all-tagged show dot1x show dvlan statistics show environment 2-756 Examples This example shows how to display environmental status information: 2-757 This example shows how to display temperature information: This example shows how to display the inline power for all modules: 2-758 This example shows how to display the inline power status for a specific module: This example shows how to display cooling information: Page Page show errdisable-timeout show errordetection show fabric channel 2-764 This example shows how to display fabric channel utilization information: This example shows how to display switch mode and fabric channel status: This example shows how to display the counters for all fabric-enabled modules: 2-765 Page show fabric status show file show firewall show flash 2-771 2-772 Related Commands download resetswitch show ftp show garp timer show gmrp configuration show gmrp statistics show gmrp timer show gvrp configuration Page show gvrp statistics Page show ifindex show igmp flooding show igmp gda_status show igmp leave-query-type show igmp mode show igmp querier information show igmp ratelimit-info show igmp statistics Page show imagemib show interface Page show ip alias show ip dns Page show ip http Page show ip permit Page 2s2 show ip route Page show kerberos Page show l2protocol-tunnel statistics Page show lacp-channel Page 2-809 This example shows how to display all ports that are assigned to an administrative key: Page show lcperroraction show lda Page 2-814 This example shows how to display uncommitted ASLB information: This example shows how to display ASLB information for the source IP address in shor t fo rm at: Page show localuser show log Page show log command show logging Page show logging buffer show logging callhome Page show logging callhome destination Page show logging callhome from show logging callhome reply-to show logging callhome severity show logging callhome smtp-server show mac Page Page show microcode show mls Page show mls acl-route show mls cef exact-route show mls cef interface Page show mls cef mac show mls cef rpf Page show mls cef summary Page show mls entry Page Page 2-849 For destination-only flow: For destination-source flow: For destination-source: Destination-only flow: 2-850 2-851 Related Commands clear mls statistics entry show mls entry cef 2-853 Examples This example shows how to display information for all CEF entries: These examples show how to display information for a specific entry type: Page Page show mls entry netflow-route Page show mls exclude protocol show mls multicast Page 2-861 Page show mls nde show mls netflow-route show mls pbr-route show mls statistics Page 2-868 This example shows how to display the statistics for all protocol categories: This example shows how to display the up time and aging time on a Supervisor Engine 2: This example shows how to display the MLS statistical entries on a Supervisor Engin e 2: Page show mls verify show module 2-872 This example shows the display for an 8-port T1/E1 ISDN PRI services-configured module: Page show moduleinit Page show msfcautostate show msmautostate show multicast group Page show multicast group count show multicast protocols status show multicast router Page show multicast v3-group show netstat Page Page Page Page Page Page show ntp Page show pbf 2-895 This example shows how to display adjacency information for adjacency a_1: This example shows how to display statistics for PFC2: This example shows how to display statistics for adjacency a_1: This example shows how to display the adjacency map for PFC2: Page show pbf-map show port 2-899 Examples This example shows how to display the status and counters for a specific module and port: This example shows port information on a 48-port 10/100BASE-TX module with i nli ne p ower: 2-900 2-901 2-902 Page Page Page show port arp-inspection show port auxiliaryvlan Page show port broadcast Page show port capabilities 2-912 This example shows the port capabilities on an 8-port T1/E1 ISDN PRI services configured-module: 2-913 This example shows the port capabilities on an Intrusion Detection System Module: Page Page show port cdp Page show port channel 2-919 Examples This example shows how to display Ethernet channeling informat ion fo r mod ul e 1: This example shows how to display port statistics: This example shows how to display port information: 2-920 Page Page Page show port cops Page show port counters Page show port debounce show port dot1q-all-tagged show port dot1q-ethertype show port dot1qtunnel show port dot1x Page show port errdisable-timeout Page show port flowcontrol Page show port inlinepower Page show port jumbo show port l2protocol-tunnel show port lacp-channel 2-943 This example shows how to display LACP channel information for all ports on module 4: This example shows how to display LACP channel information for port 7 on module 4: This example shows how to display detailed LACP channel information for port 7 on module 4: This example shows how to display LACP channel statistics for all ports on module 4: Page show port mac Page show port mac-address 2-948 show port negotiation show port prbs show port protocol show port qos 2-953 Page show port rsvp show port security 2-957 This example shows how to display system-wide configuration information: Page show port spantree show port status show port sync-restart-delay show port tdr Page show port trap show port trunk Page show port unicast-flood show port voice 2-969 2-970 Related Commands se t po rt voi ce int erf ace dhcp show port voice fdl show port voice interface show port voice active 2-972 This example shows how to display regular calls: This example shows how to display calls for a specified port: 2-973 Page show port voice fdl Page show port voice interface show port vtp 2-979 Related Commands set port vtp set vtp show vtp show proc 2-981 This example shows how to display process information: Page Page show protocolfilter show pvlan Page show pvlan capability Page show pvlan mapping Page show qos acl editbuffer show qos acl info Page show qos acl map Page show qos acl resource-usage show qos bridged-microflow-policing show qos info 2-999 This example shows how to display QoS-related NVRAM receive-threshold information: 2-1000 This example shows how to display all QoS-related NVRAM threshold information: This example shows how to display the current QoS runtime information: 2-1001 This example shows another display of the current QoS runtime information: 2-1002 This example shows how to display the current QoS configuration information: 2-1003 This example shows another display of the current QoS configuration information : Related Commands set qos show qos mac-cos Page show qos maps 2-1007 Examples This example shows how to display the cos-dscp-map map: This example shows how to display the ipprec-dscp-map map: This example shows how to display the dscp-cos-map map: This example shows how to display the policed-dscp-map map: 2-1008 This example shows how to display normal-rate maps: show qos policer Page show qos policy-source show qos rsvp show qos statistics Page show qos statistics export info show qos status show radius Page show rate-limit show rcp show reset show rgmp group show rgmp statistics show rspan 2-1025 Related Commands set rspan show running-config 2-1027 2-1028 This example shows how to display the nondefault system configuration for module 3: Related Commands clear config show startup-config write show security acl 2-1030 This example shows how to display VACLs in the edit buffer: 2-1031 This example shows how to display the contents of the VACL edit buffer: Related Commands clear security acl commit rollback show security acl arp-inspection show security acl capture-ports show security acl feature ratelimit show security acl log Page Page show security acl map show security acl resource-usage show snmp Page show snmp access Page show snmp access-list show snmp buffer show snmp community 2-1047 Related Commands clear snmp community set snmp community show snmp context show snmp counters Page Page Page show snmp engineid show snmp group Page show snmp ifalias show snmp notify Page show snmp rmonmemory show snmp targetaddr Page show snmp targetparams Page show snmp user Page show snmp view Page show span Page show spantree 2-1071 Page Page show spantree backbonefast show spantree blockedports show spantree bpdu-filter show spantree bpdu-guard show spantree bpdu-skewing Page show spantree conflicts Page show spantree defaultcostmode show spantree guard Page show spantree mapping 2-1086 This example shows how to display mappings configured on the local switch: Related Commands se t v lan show spantree mistp-instance Page show spantree mst Page show spantree mst config Page show spantree portfast show spantree portinstancecost show spantree portvlancost show spantree statistics 2-1097 2-1098 This example shows how to display instance-specific information: 2-1099 This example shows how to display MST instance-specific information: Page Page Page Page show spantree summary 2-1105 This example shows how to display non-VLAN-specific information only: This example shows how to display a summary of spanning tree instance inf orm ation : 2-1106 This example shows how to display a summary of spanning tree MST instanc e info rm atio n: Related Commands show spantree This example shows how to display a summary of spanning tree noninstance-specific MST informat ion: show spantree uplinkfast Page show startup-config 2-1110 2-1111 Related Commands show running-config show summertime show system 2-1114 Page Page show system highavailability show system info-log show system supervisor-update show system switchmode show tacacs Page show tech-support Page Page show test 2-1127 This example shows the error display for module 3: This example shows the display when errors are reported by the LCP for module 3: 2-1128 This example shows the display if you do not specify a module: This example shows how to display diagnostic level status: Page Page show time show timezone show top Page show top report Page show traffic show trunk 2-1139 Examples This example shows how to display trunking information for the switc h: This example shows how to display detailed information about the specified trunk port: Page show udld Page show users show version 2-1145 This example shows how to display version information for a specific module: Page show vlan 2-1148 2-1149 This example shows how to display information for a specific VLAN and type: This example shows how to display information for nontrunk ports only on a specific VL AN : This example shows how to display extended-range VLANs: Page Page show vlan counters Page show vlan verify-port-provisioning show vmps Page show vmps mac show vmps statistics show vmps vlan show vtp Page show vtp domain Page show vtp statistics Page slip squeeze stack switch switch console switch fabric sync sysret tclquit tclsh telnet test cable-diagnostics Page test snmp trap traceroute Page Page unalias undelete unset=varname varname= verify wait whichboot write 2-1191 Examples This example shows how to upload the system5.cfg file to the mercury host : This example shows how to upload the system5.cfg file to the mercury host: This example shows how to display the configuration file on the terminal (partial display): Page write tech-support Page Page APPENDIX A Acronyms Page Page Page Page Page APPENDIX B Acknowledgments for Open-Source Software Page INDEX Symbols Numerics A B C Page Page D E F G H I J K L M Page N O P Page Q R Page S Page Page Page T U V Page W