129
4.1.5. Configuring an Authentication Profile
The commands in this example create a new authentication profile named myList that uses the RADIUS
server configured in the previous example to authenticate users who attempt to access the switch
management interface by using SSH or Telnet. If the RADIUS authentication is unsuccessful, the switch uses
the local user database to attempt to authenticate the users.
To configure the switch:
1. Create an access profile list that uses RADIUS as the first access method and the local user database as
the second login method.
(QCT) #configure
(QCT) (Config)#aaa authentication login myList radius local
Note: The switch attempts to contact the primary RADIUS server that has been configured on the switch.
To
see an example of how to configure a RADIUS server on the switch, see “Configuring the Primary and
Secondary RADIUS Servers”
2. Enter line configuration mode for Telnet and specify that any attempt to access the switch by using
Telnet are authenticated using the methods defined in the profile created in the previous step.
(QCT) (Config)#line vty
(QCT) (Config-vty)#login authentication myList
(QCT) (Config-vty)#exit
3. Enter line configuration mode for SSH and specify that any attempt to access the switch by using SSH are
authenticated using the methods defined in the myList profile.
(QCT) (Config)#line ssh
(QCT) (Config-ssh)#login authentication myList
(QCT) (Config-ssh)#exit
(QCT) (Config)#exit
4. View the current authentication methods and profiles.
(QCT) #show authentication methods
Login Authentication Method Lists
---------------------------------
defaultList : local
networkList : local
myList : radius local
Enable Authentication Method Lists
----------------------------------
enableList : enable none
To Next Page
Loading...
Need help?
General