Cisco Catalyst 2950 Software Configuration Manual page 8

Contents
Controlling Switch Access with TACACS+
Controlling Switch Access with RADIUS
Configuring the Switch for Local Authentication and Authorization
Configuring the Switch for Secure Shell
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
viii
Protecting Enable and Enable Secret Passwords with Encryption
Disabling Password Recovery
Setting a Telnet Password for a Terminal Line
Configuring Username and Password Pairs
Configuring Multiple Privilege Levels
Setting the Privilege Level for a Command
Changing the Default Privilege Level for Lines
Logging into and Exiting a Privilege Level
Understanding TACACS+
TACACS+ Operation
8-12
Configuring TACACS+
8-12
Default TACACS+ Configuration
Identifying the TACACS+ Server Host and Setting the Authentication Key
Configuring TACACS+ Login Authentication
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services
Starting TACACS+ Accounting
Displaying the TACACS+ Configuration
Understanding RADIUS
8-18
RADIUS Operation
8-19
Configuring RADIUS
8-20
Default RADIUS Configuration
Identifying the RADIUS Server Host
Configuring RADIUS Login Authentication
Defining AAA Server Groups
Configuring RADIUS Authorization for User Privileged Access and Network Services
Starting RADIUS Accounting
Configuring Settings for All RADIUS Servers
Configuring the Switch to Use Vendor-Specific RADIUS Attributes
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication
Displaying the RADIUS Configuration
Understanding SSH
8-33
SSH Servers, Integrated Clients, and Supported Versions
Limitations
8-34
Configuring SSH
8-34
Configuration Guidelines
8-5
8-6
8-7
8-8
8-8
8-9
8-10
8-10
8-10
8-13
8-14
8-17
8-17
8-17
8-20
8-20
8-23
8-25
8-28
8-29
8-31
8-33
8-34
8-4
8-13
8-27
8-29
8-30
8-32
8-33
78-11380-12
8-16