Cisco 2950 - Catalyst Switch - Page 10

Contents
x
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
78-11380-10
Configuring RADIUS 9-20
Default RADIUS Configuration 9-20
Identifying the RADIUS Server Host 9-21
Configuring RADIUS Login Authentication 9-23
Defining AAA Server Groups 9-25
Configuring RADIUS Authorization for User Privileged Access and Network Services 9-27
Starting RADIUS Accounting 9-28
Configuring Settings for All RADIUS Servers 9-29
Configuring the Switch to Use Vendor-Specific RADIUS Attributes 9-29
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication 9-30
Displaying the RADIUS Configuration 9-31
Configuring the Switch for Local Authentication and Authorization 9-32
Configuring the Switch for Secure Shell 9-33
Understanding SSH 9-33
SSH Servers, Integrated Clients, and Supported Versions 9-33
Limitations 9-34
Configuring SSH 9-34
Configuration Guidelines 9-34
Cryptographic Software Image Guidelines 9-35
Setting Up the Switch to Run SSH 9-35
Configuring the SSH Server 9-36
Displaying the SSH Configuration and Status 9-37
CHAPTER 10 Configuring 802.1x Port-Based Authentication 10-1
Understanding 802.1x Port-Based Authentication 10-1
Device Roles 10-2
Authentication Initiation and Message Exchange 10-3
Ports in Authorized and Unauthorized States 10-4
802.1x Accounting 10-5
Supported Topologies 10-5
Using 802.1x with Port Security 10-6
Using 802.1x with Voice VLAN Ports 10-7
Using 802.1x with VLAN Assignment 10-7
Using 802.1x with Guest VLAN 10-8
Configuring 802.1x Authentication 10-9
Default 802.1x Configuration 10-9
802.1x Configuration Guidelines 10-10
Upgrading from a Previous Software Release 10-11
Enabling 802.1x Authentication 10-11