Security Management
362
Managed Switches
CLI Example 2: Configure EXEC Authorization by a RADIUS
Server
The following example shows how to use the CLI to configure command authorization by a
RADIUS server for a Telnet user and allow the user to access privileged EXEC mode directly.
1. Configure a RADIUS server on the switch.
2. Change the authentication mode for Telnet users to RADIUS.
3. Verify that the RADIUS authentication is set up for Telnet users.
4. Create an EXEC authorization list and configure RADIUS as the authorization.
(Netgear Switch) #config
(Netgear Switch) (Config)#radius server host auth 172.26.2.41
(Netgear Switch) (Config)#radius server key auth 172.26.2.41
Enter secret (64 characters max):12345678
Re-enter secret:12345678
(Netgear Switch)(Config)#aaa authentication login networkList radius
(Netgear Switch) #show authentication methods
Login Authentication Method Lists
---------------------------------
defaultList : local
networkList : radius
Enable Authentication Method Lists
----------------------------------
enableList : enable none
enableNetList : enable none
Line Login Method List Enable Method List
------- ----------------- ------------------
Console defaultList enableList
Telnet networkList enableList
SSH networkList enableList
HTTPS :local
HTTP :local
DOT1X :
(Netgear Switch)(Config)# aaa authorization exec execList radius
To Next Page
Loading...
