Cisco Catalyst 2928 Software Configuration Manual page 8

Contents
Controlling Switch Access with TACACS+
Controlling Switch Access with RADIUS
Configuring the Switch for Local Authentication and Authorization
Configuring the Switch for Secure Shell
Configuring the Switch for Secure Socket Layer HTTP
Catalyst 2928 Switch Software Configuration Guide
viii
Understanding TACACS+
TACACS+ Operation
8-12
Configuring TACACS+
8-12
Default TACACS+ Configuration
Identifying the TACACS+ Server Host and Setting the Authentication Key
Configuring TACACS+ Login Authentication
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services
Starting TACACS+ Accounting
Displaying the TACACS+ Configuration
Understanding RADIUS
8-18
RADIUS Operation
8-19
Configuring RADIUS
8-20
Default RADIUS Configuration
Identifying the RADIUS Server Host
Configuring RADIUS Login Authentication
Defining AAA Server Groups
Configuring RADIUS Authorization for User Privileged Access and Network Services
Starting RADIUS Accounting
Configuring Settings for All RADIUS Servers
Configuring the Switch to Use Vendor-Specific RADIUS Attributes
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication
Displaying the RADIUS Configuration
Understanding SSH
8-33
SSH Servers, Integrated Clients, and Supported Versions
Limitations
8-34
Configuring SSH
8-34
Configuration Guidelines
Setting Up the Switch to Run SSH
Configuring the SSH Server
Displaying the SSH Configuration and Status
Understanding Secure HTTP Servers and Clients
Certificate Authority Trustpoints
CipherSuites
8-39
8-10
8-10
8-13
8-14
8-17
8-17
8-17
8-20
8-20
8-23
8-25
8-28
8-29
8-31
8-33
8-34
8-35
8-36
8-36
8-37
8-37
8-37
8-13
8-27
8-29
8-31
8-32
8-33
OL-23389-01
8-16