Cisco WS-C6506 - Configuring RADIUS Authentication

39-25
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Configuring Authentication on the Switch
Disabling TACACS+ Authentication
When local authentication is disabled and only TACACS+ authentication is enabled, if you disable
TACACS+ authentication, local authentication is reenabled automatically.
To disable TACACS+ authentication, perform this task in privileged mode:
This example shows how to disable TACACS+ authentication for the console and Telnet connections and
verify the configuration:
Console> (enable) set authentication login tacacs disable
tacacs login authentication set to disable for console and telnet session.
Console> (enable) set authentication enable tacacs disable
tacacs enable authentication set to disable for console and telnet session.
Console> (enable) show authentication
Login Authentication: Console Session Telnet Session
--------------------- ---------------- ----------------
tacacs disabled disabled
radius disabled disabled
local enabled(primary) enabled(primary)
Enable Authentication: Console Session Telnet Session
---------------------- ----------------- ----------------
tacacs disabled disabled
radius disabled disabled
local enabled(primary) enabled(primary)
Console> (enable)
Configuring RADIUS Authentication
These sections describe how to configure RADIUS authentication on the switch:
• Specifying RADIUS Servers, page 39-26
• Specifying the RADIUS Key, page 39-26
• Enabling RADIUS Authentication, page 39-27
• Specifying the RADIUS Timeout Interval, page 39-29
• Specifying the RADIUS Retransmit Count, page 39-29
• Specifying the RADIUS Dead Time, page 39-30
• Specifying Optional Attributes for RADIUS Servers, page 39-31
Task Command
Step 1
Disable TACACS+ authentication for normal
login mode. Enter the console or telnet keyword
if you want to disable TACACS+ only for the
console port or Telnet connection attempts.
set authentication login tacacs disable [all |
console | http | telnet]
Step 2
Disable TACACS+ authentication for enable
mode. Enter the console or telnet keyword if you
want to disable TACACS+ only for the console
port or Telnet connection attempts.
set authentication enable tacacs disable [all |
console | http | telnet]
Step 3
Verify the TACACS+ configuration. show authentication