39-27
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Configuring Authentication on the Switch
To specify a RADIUS key, perform this task in privileged mode:
This example shows how to specify a RADIUS key and verify the configuration (in normal mode, the
RADIUS key value is hidden):
Console> (enable) set radius key Secret_RADIUS_key
Radius key set to Secret_RADIUS_key
Console> (enable) show radius
Login Authentication: Console Session Telnet Session
--------------------- ---------------- ----------------
tacacs disabled disabled
radius enabled(primary) enabled(primary)
local enabled enabled
Enable Authentication: Console Session Telnet Session
---------------------- ----------------- ----------------
tacacs disabled disabled
radius enabled(primary) enabled(primary)
local enabled enabled
Radius Deadtime: 0 minutes
Radius Key: Secret_RADIUS_key
Radius Retransmit: 2
Radius Timeout: 5 seconds
Radius-Server Status Auth-port
----------------------------- ------- ------------
172.20.52.3 primary 1812
Console> (enable)
Enabling RADIUS Authentication
Note Specify at least one RADIUS server before enabling RADIUS authentication on the switch. For
information on specifying a RADIUS server, see the “Specifying RADIUS Servers” section on
page 39-26.
You can enable RADIUS authentication for login and enable access to the switch. If desired, you can
enter the console or telnet keyword to specify that RADIUS authentication is used only on console or
Telnet connections. If you are using both RADIUS and TACACS+, you can use the primary keyword to
force the switch to try RADIUS authentication first.
Task Command
Step 1
Specify the RADIUS key that is used to encrypt
packets that are sent to the RADIUS server.
set radius key key
Step 2
Verify the RADIUS configuration. show radius
To Next Page
Loading...
Need help?
General