Filter
Top Products
Command Line Interface
4-70
4
Authentication Commands
You can configure this switch to authenticate users logging into the system for
management access using local or remote authentication methods. You can also
enable port-based authentication for network client access using IEEE 802.1X.
Authentication Sequence
authentication login
This command defines the login authentication method and precedence. Use the no
form to restore the default.
Syntax
authentication login {[local] [radius] [tacacs]}
no authentication login
• local - Use local password.
• radius - Use RADIUS server password.
• tacacs - Use TACACS server password.
Default Setting
Local
Command Mode
Global Configuration
Command Usage
• RADIUS uses UDP while TACACS+ uses TCP. UDP only offers best effort
delivery, while TCP offers a connection-oriented transport. Also, note that
RADIUS encrypts only the password in the access-request packet from the
client to the server, while TACACS+ encrypts the entire body of the packet.
Table 4-27 Authentication Commands
Command Group Function Page
Authentication Sequence Defines logon authentication method and precedence 4-70
RADIUS Client Configures settings for authentication via a RADIUS server 4-72
TACACS+ Client Configures settings for authentication via a TACACS+ server 4-75
Port Security Configures secure addresses for a port 4-78
Port Authentication Configures host authentication on specific ports using 802.1X 4-80
Table 4-28 Authentication Sequence Commands
Command Function Mode Page
authentication login Defines logon authentication method and precedence GC 4-70
authentication enable Defines the authentication method and precedence for
command mode change
GC 4-71