39-26
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Configuring Authentication on the Switch
• Clearing RADIUS Servers, page 39-32
• Clearing the RADIUS Key, page 39-32
• Disabling RADIUS Authentication, page 39-33
Specifying RADIUS Servers
To specify one or more RADIUS servers, perform this task in privileged mode:
This example shows how to specify a RADIUS server and verify the configuration:
Console> (enable) set radius server 172.20.52.3
172.20.52.3 with auth-port 1812 added to radius server table as primary server.
Console> (enable) show radius
Login Authentication: Console Session Telnet Session
--------------------- ---------------- ----------------
tacacs disabled disabled
radius disabled disabled
local enabled(primary) enabled(primary)
Enable Authentication: Console Session Telnet Session
---------------------- ----------------- ----------------
tacacs disabled disabled
radius disabled disabled
local enabled(primary) enabled(primary)
Radius Deadtime: 0 minutes
Radius Key:
Radius Retransmit: 2
Radius Timeout: 5 seconds
Radius-Server Status Auth-port
----------------------------- ------- ------------
172.20.52.3 primary 1812
Console> (enable)
Specifying the RADIUS Key
Note If you specify a RADIUS key on the client, make sure that you specify an identical key on the RADIUS
server.
The RADIUS key is used to encrypt and authenticate all communication between the RADIUS client
and server. You must configure the same key on the client and the RADIUS server.
The key is limited to 65 characters. It can include any printable ASCII characters except tabs.
Task Command
Step 1
Specify the IP address of up to three RADIUS
servers. Specify the primary server using the
primary keyword. Optionally, specify the
destination UDP port to use on the server.
set radius server ip_addr [auth-port port]
[primary]
Step 2
Verify the RADIUS server configuration. show radius
To Next Page
Loading...
Need help?
General