Cisco WS-C6506 - Page 976

39-42
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Configuring Authentication on the Switch
To encrypt a Telnet session, perform this task:
This example shows how to configure a Telnet session for Kerberos authentication and encryption:
Console> (enable) telnet encrypt kerberos
Displaying and Clearing Kerberos Configurations
Use these commands to display and clear the Kerberos configurations on the switch:
• show kerberos
• show kerberos creds
• clear kerberos creds
To display the Kerberos configuration, perform this task in privileged mode:
This example shows how to display the Kerberos configuration:
kerberos> (enable) show kerberos
Kerberos Local Realm:CISCO.COM
Kerberos server entries:
Realm:CISCO.COM, Server:187.0.2.1, Port:750
Realm:CISCO.COM, Server:187.20.2.1, Port:750
Kerberos Domain<->Realm entries:
Domain:cisco.com, Realm:CISCO.COM
Kerberos Clients NOT Mandatory
Kerberos Credentials Forwarding Enabled
Kerberos Pre Authentication Method set to None
Kerberos config key:
Kerberos SRVTAB Entries
Srvtab Entry 1:host/niners.cisco.com@CISCO.COM 0 932423923 1 1 8 03;;5>00>50;0=0=0
Srvtab Entry 2:host/niners.cisco.edu@CISCO.EDU 0 933974942 1 1 8 00?58:127:223=:;9
kerberos> (enable)
To display the Kerberos credentials, perform this task in privileged mode:
This example shows how to display the Kerberos credentials:
Console> (enable) show kerberos creds
No Kerberos credentials.
Console> (enable)
Task Command
Encrypt a Telnet session. telnet encrypt kerberos host
Task Command
Display the Kerberos configuration. show kerberos
Task Command
Display the Kerberos credentials. show kerberos creds