Microsoft ES4625, ES4649 manual Authentication Commands, Authentication Sequence, TACACS+ Client

4 Command Line Interface

Authentication Commands

You can configure this switch to authenticate users logging into the system for management access using local or remote authentication methods. You can also enable port-based authentication for network client access using IEEE 802.1X.

Table 4-27 Authentication Commands

Command Group	Function	Page
Authentication Sequence	Defines logon authentication method and precedence	4-70
RADIUS Client	Configures settings for authentication via a RADIUS server	4-72
TACACS+ Client	Configures settings for authentication via a TACACS+ server	4-75
Port Security	Configures secure addresses for a port	4-78
Port Authentication	Configures host authentication on specific ports using 802.1X	4-80

Authentication Sequence

Table 4-28 Authentication Sequence Commands

Command	Function	Mode	Page
authentication login	Defines logon authentication method and precedence	GC	4-70
authentication enable	Defines the authentication method and precedence for	GC	4-71
	command mode change

authentication login

This command defines the login authentication method and precedence. Use the no form to restore the default.

Syntax

authentication login {[local] [radius] [tacacs]} no authentication login

•local - Use local password.

•radius - Use RADIUS server password.

•tacacs - Use TACACS server password.

Default Setting

Local

Command Mode

Global Configuration

Command Usage

•RADIUS uses UDP while TACACS+ uses TCP. UDP only offers best effort delivery, while TCP offers a connection-oriented transport. Also, note that RADIUS encrypts only the password in the access-request packet from the client to the server, while TACACS+ encrypts the entire body of the packet.

4-70