RADIUS and TACACS are logon authentication protocols that use software running on a central server to control access to RADIUS-aware or TACACS-aware devices on the network. An authentication server contains a database of multiple user name and password pairs with associated privilege levels for each user that requires management access to a switch.

TABLE 4-9Authentication Commands

Command

 

Function

Mode

Page

 

 

 

 

Authentication Method

 

 

 

authentication

 

Defines logon authentication method and precedence

GC

4-46

login

 

 

 

 

RADIUS Client

 

 

 

 

radius-server

host

Specifies the RADIUS server

GC

4-48

radius-server port

Sets the RADIUS server network port

GC

4-48

radius-server

key

Sets the RADIUS encryption key

GC

4-49

radius-server

 

Sets the number of retries

GC

4-50

retransmit

 

 

 

 

radius-server

 

Sets the interval between sending authentication

GC

4-50

timeout

 

requests

 

 

show radius-server

Shows the current RADIUS settings

PE

4-51

TACACS Client

 

 

 

 

tacacs-server host tacacs-server port tacacs-server key show tacacs-server

Specifies the TACACS server

GC

4-52

Sets the TACACS server network port

GC

4-52

Sets the TACACS encryption key

GC

4-53

Shows the current TACACS settings

PE

4-54

4.3.4.1authentication login

Use this command to define the login authentication method and precedence. Use the no form to restore the default.

Syntax

authentication login {[local] [radius] [tacacs]}

no authentication login

local – Use local password.

radius – Use RADIUS server password.

tacacs – Use TACACS server password.

4-46Sun Fire B1600 Blade System Chassis Switch Administration Guide • June 2003

Page 244
Image 244
Sunfire B1600 manual Authentication login, 9Authentication Commands