39-21
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Configuring Authentication on the Switch
To enable TACACS+ authentication, perform this task in privileged mode:
This example shows how to enable TACACS+ authentication for the console and Telnet connections and
verify the configuration:
Console> (enable) set authentication login tacacs enable
tacacs login authentication set to enable for console and telnet session.
Console> (enable) set authentication enable tacacs enable
tacacs enable authentication set to enable for console and telnet session.
Console> (enable) show authentication
Login Authentication: Console Session Telnet Session
--------------------- ---------------- ----------------
tacacs enabled(primary) enabled(primary)
radius disabled disabled
local enabled enabled
Enable Authentication: Console Session Telnet Session
---------------------- ----------------- ----------------
tacacs enabled(primary) enabled(primary)
radius disabled disabled
local enabled enabled
Console> (enable)
Specifying the TACACS+ Key
Note If you configure a TACACS+ key on the client, make sure that you configure an identical key on the
TACACS+ server.
To specify a TACACS+ key, perform this task in privileged mode:
Task Command
Step 1
Enable TACACS+ authentication for normal login
mode. Enter the console or telnet keyword if you
want to enable TACACS+ only for the console
port or Telnet connection attempts.
set authentication login tacacs enable [all |
console | http | telnet] [primary]
Step 2
Enable TACACS+ authentication for enable
mode. Enter the console or telnet keyword if you
want to enable TACACS+ only for the console
port or Telnet connection attempts.
set authentication enable tacacs enable [all |
console | http | telnet] [primary]
Step 3
Verify the TACACS+ configuration. show authentication
Task Command
Step 1
Specify the key that is used to encrypt packets. set tacacs key key
Step 2
Verify the TACACS+ configuration. show tacacs
To Next Page
Loading...
Need help?
General