C
ONFIGURING
THE
S
WITCH
2-14Configuring Radius Logon Authentication
Remote Authentication Dial-in User Service (RADIUS) is an
authentication protocol that uses a central ser ver to control access to
RADIUS-compliant devices on the network. A RADIUS ser ver can be
programmed with a database of multiple user nam e/password pairs and
associated privilege levels for each user or group that requi res management
access to this switch using the console port, Telnet or the Web.
When setting up privilege levels on the RADIUS server, level 0 allows
guest (CLI - Normal Exec) access to the switch. Only level 15 allows
administrator (CLI - Privileged Exec) access.
Command Attributes
•Authentication – Select the authentication, or authentication
sequence required:
- Radius – User authentication is performed using a RADIUS server
only.
- Local – User authentication is performed only locally by th e switch.
- Radius, Local – User authentication is attempted first using a
RADIUS server, then locally by the switch.
- Local, Radius – User authentication is first attempted locally by the
switch, then using a RADIUS server.
•Server IP Address – The IP address of the RADIUS server.
•Server Port Number – The UDP port number used by the
RADIUS server.
•Secret Text String – The text string that is shared between the
switch and the RADIUS server.
•Number of Server Transmits – The number of request transmits
to the RADIUS server before failure.