Table of Contents
Advertisement
Administrative AAA Configuration Scenarios
45
Natasha also enables backup RADIUS authentication for Telnet
administrative users. If the RADIUS server does not respond, the user is
authenticated by the local database in the WX switch. Natasha types the
following commands:
WX1200# set authentication admin * sg1 local
success: change accepted.
WX1200# save config
success: configuration saved.
The order in which Natasha enters authentication methods in the set
authentication command determines the method MSS attempts first.
The local database is the first method attempted for console users and
the last method attempted for Telnet administrators.
Authentication When
This scenario illustrates how to enable RADIUS authentication for both
RADIUS Servers Do
console and administrative users, but to unconditionally allow access for
Not Respond
administrative and console users if the RADIUS server (in this case, server
r1 in server group sg1) does not respond. To configure unconditional
authentication, Natasha sets the authentication method to none. She
types the following commands in this order:
WX1200# set user natasha password m@Jor
User natasha created
WX1200# set radius server r1 address 192.168.253.1 key
sunFLOW#$
success: change accepted.
WX1200# set server group sg1 members r1
success: change accepted.
WX1200# set authentication console * sg1 none
success: change accepted.
WX1200# set user admin attr service-type 6
success: change accepted.
WX1200# set authentication admin * sg1 none
success: change accepted.
WX1200# save config
success: configuration saved.
Advertisement
Table of Contents
