Filter
Top Products
C
ONFIGURING
THE
S
WITCH
3-78
• You can specify up to three authentication methods for any user to
indicate the authentication sequence. For example, if you select (1)
RADIUS, (2) TACACS and (3) Local, the user name and password on
the RADIUS server is verified first. If the RADIUS server is not
available, then authentication is attempted using the TACACS+ server,
and finally the local user name and password is checked.
Command Attributes
• Authentication – Select the authentication, or authentication
sequence required:
- Local – User authentication is performed only locally by the switch.
- Radius – User authentication is performed using a RADIUS server
only.
- TACACS – User authentication is performed using a TACACS+
server only.
- [authentication sequence] – User authentication is performed by up
to three authentication methods in the indicated sequence.
• RADIUS Settings
- Global – Provides globally applicable RADIUS settings.
- ServerIndex – Specifies one of five RADIUS servers that may be
configured. The switch attempts authentication using the listed
sequence of servers. The process ends when a server either approves
or denies access to a user.
- Server IP Address – Address of authentication server. (Default:
10.1.0.1)
- Server Port Number – Network (UDP) port of authentication
server used for authentication messages. (Range: 1-65535; Default:
1812)
- Secret Text String – Encryption key used to authenticate logon
access for client. Do not use blank spaces in the string. (Maximum
length: 20 characters)