Contents
ix
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
OL-12247-04
Configuring RADIUS 7-26
Default RADIUS Configuration 7-27
Identifying the RADIUS Server Host 7-27
Configuring RADIUS Login Authentication 7-29
Defining AAA Server Groups 7-31
Configuring RADIUS Authorization for User Privileged Access and Network Services 7-33
Starting RADIUS Accounting 7-34
Configuring Settings for All RADIUS Servers 7-35
Configuring the Switch to Use Vendor-Specific RADIUS Attributes 7-35
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication 7-37
Configuring CoA on the Switch 7-38
Monitoring and Troubleshooting CoA Functionality 7-39
Configuring RADIUS Server Load Balancing 7-39
Displaying the RADIUS Configuration 7-39
Controlling Switch Access with Kerberos 7-39
Understanding Kerberos 7-40
Kerberos Operation 7-42
Authenticating to a Boundary Switch 7-42
Obtaining a TGT from a KDC 7-43
Authenticating to Network Services 7-43
Configuring Kerberos 7-43
Configuring the Switch for Local Authentication and Authorization 7-44
Configuring the Switch for Secure Shell 7-45
Understanding SSH 7-46
SSH Servers, Integrated Clients, and Supported Versions 7-46
Limitations 7-47
Configuring SSH 7-47
Configuration Guidelines 7-47
Setting Up the Switch to Run SSH 7-48
Configuring the SSH Server 7-49
Displaying the SSH Configuration and Status 7-50
Configuring the Switch for Secure Socket Layer HTTP 7-50
Understanding Secure HTTP Servers and Clients 7-50
Certificate Authority Trustpoints 7-51
CipherSuites 7-52