Authentication Commands 4

You can specify three authentication methods in a single command to indicate the authentication sequence. For example, if you enter “authentication enable radius tacacs local,” the user name and password on the RADIUS server is verified first. If the RADIUS server is not available, then authentication is attempted on the TACACS+ server. If the TACACS+ server is not available, the local user name and password is checked.

Example

Console(config)#authentication enable radius

Console(config)#

Related Commands

enable password - sets the password for changing command modes (4-27)

RADIUS Client

Remote Authentication Dial-in User Service (RADIUS) is a logon authentication protocol that uses software running on a central server to control access to RADIUS-aware devices on the network. An authentication server contains a database of multiple user name/password pairs with associated privilege levels for each user or group that require management access to a switch.

Table 4-28. RADIUS Client Commands

Command

Function

Mode

Page

radius-server host

Specifies the RADIUS server

GC

4-70

 

 

 

 

radius-server port

Sets the RADIUS server network port

GC

4-70

 

 

 

 

radius-server key

Sets the RADIUS encryption key

GC

4-71

 

 

 

 

radius-server retransmit

Sets the number of retries

GC

4-71

 

 

 

 

radius-server timeout

Sets the interval between sending authentication requests

GC

4-72

 

 

 

 

show radius-server

Shows the current RADIUS settings

PE

4-72

 

 

 

 

radius-server host

This command specifies primary and backup RADIUS servers and authentication parameters that apply to each server. Use the no form to restore the default values.

Syntax

[no] radius-serverindex host {host_ip_address host_alias} [auth-portauth_port] [timeout timeout] [retransmit retransmit] [key key]

index - Allows you to specify up to five servers. These servers are queried in sequence until a server responds or the retransmit period expires.

host_ip_address - IP address of server.

host_alias - Symbolic name of server. (Maximum length: 20 characters)

port_number - RADIUS server UDP port used for authentication messages. (Range: 1-65535)

4-69

Page 245
Image 245
SMC Networks 16 10BASE-T Radius Client Commands Function Mode, Show radius-server Shows the current Radius settings