C
HAPTER
11
| Authentication Commands
– 226 –
COMMAND USAGE
◆ By default, management access is always checked against the
authentication database stored on the local switch. If a remote
authentication server is used, you must specify the authentication
method and the corresponding parameters for the remote
authentication protocol. Local and remote logon authentication control
management access via Telnet, SSH, or a web browser.
◆ When using RADIUS logon authentication, the user name and password
must be configured on the authentication server. The encryption
methods used for the authentication process must also be configured or
negotiated between the authentication server and logon client. This
switch can pass authentication messages between the server and client
that have been encrypted using MD5 (Message-Digest 5), TLS
(Transport Layer Security), or TTLS (Tunneled Transport Layer
Security).
N
OTE
:
This guide assumes that RADIUS servers have already been
configured to support AAA. The configuration of RADIUS server software is
beyond the scope of this guide. Refer to the documentation provided with
the RADIUS and server software.
EXAMPLE
Auth>radius 1 enable 192.168.0.19 greenhills
Auth>radius
RADIUS Authentication Server Configuration:
===========================================
Server Mode IP Address Secret Port
------ -------- --------------- ------------------------------ -----
1 Enabled 192.168.0.19 ********** 1812
2 Disabled 1812
3 Disabled 1812
4 Disabled 1812
5 Disabled 1812
Auth>
auth acct_radius This command displays or sets RADIUS accounting server settings.
SYNTAX
auth acct_radius [server-index] [enable | disable] [ip-addr]
[secret] [server-port]
server-index - Allows you to specify up to five servers. These
servers are queried in sequence until a server responds or the
retransmit period expires.
enable - Enables the specified RADIUS accounting server.
disable - Disables the specified RADIUS accounting server.
To Next Page
Loading...
