•
•
Step Description Command Keys
19 Switch to the corresponding terminal
configuration mode.
esr(config)# line <TYPE> <TYPE> – console type:
console – local console;
ssh – secure remote
console.
20 Activate user login authentication list. esr(config-line-console)# login
authentication <NAME>
<NAME> – list name, set by the
string of up to 31 characters.
Created in step 14.
21 Activate authentication list of user
privileges elevation.
esr(config-line-console)# enable
authentication <NAME>
<NAME> – list name, set by the
string of up to 31 characters.
Created in step 15.
13.1.5 Example of authentication configuration using telnet via RADIUS server
Objective:
Configure authentication for users being connected via Telnet and RADIUS (192.168.16.1/24).
Solution:
Configure connection to RADIUS server and specify the key (password):
esr# configure
esr(config)# radius-server host 192.168.16.1
esr(config-radius-server)# key ascii-text encrypted 8CB5107EA7005AFF
esr(config-radius-server)# exit
Create authentication profile:
esr(config)# aaa authentication login log radius
Specify authentication mode used for Telnet protocol connection:
esr(config)# line telnet
esr(config-line-telnet)# login authentication log
esr(config-line-telnet)# exit
esr(config)# exit
To view the information on RADIUS server connection settings, use the following command:
esr# show aaa radius-servers
To view the authentication profiles, use the following command: