AUTHENTICATION COMMANDS

Command

Function

Mode

Page

radius-server timeout

Sets the interval between sending

GC

3-55

 

authentication requests

 

 

 

 

 

 

show radius-server

Shows the current RADIUS settings

PE

3-55

 

 

 

 

TACACS+ Client

 

 

 

 

 

 

 

tacacs-server host

Specifies the TACACS+ server

GC

3-56

 

 

 

 

tacacs-server port

Specifies the TACACS+ server network

GC

3-56

 

port

 

 

 

 

 

 

tacacs-server key

Sets the TACACS+ encryption key

GC

3-57

 

 

 

 

show tacacs-server

Shows the current TACACS+ settings

GC

3-57

 

 

 

 

authentication login

Use this command to define the login authentication method and precedence. Use the no form to restore the default.

Syntax

authentication login {[local] [radius] [tacacs]} no authentication login

local - Use local authentication.

radius - Use RADIUS server authentication.

tacacs - Use TACACS+ server authentication.

Default Setting

Local only

Command Mode

Global Configuration

Command Usage

RADIUS uses UDP while TACACS+ uses TCP. UDP only offers best effort delivery, while TCP offers a connection-oriented transport. Also, note that RADIUS encrypts only the password in the access-request packet from the client to the server.

RADIUS and TACACS+ logon authentication can control

3-51

Page 195
Image 195
SMC Networks TigerSwitch 100 manual Authentication login, TACACS+ Client