Cisco ME 3400G-2CS - Ethernet Access Switch Software Configuration Manual page 8

Contents
Configuring IEEE 802.1x Port-Based Authentication
8
C H A P T E R
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
viii
Configuring RADIUS
Default RADIUS Configuration
Identifying the RADIUS Server Host
Configuring RADIUS Login Authentication
Defining AAA Server Groups
Configuring RADIUS Authorization for User Privileged Access and Network Services
Starting RADIUS Accounting
Configuring Settings for All RADIUS Servers
Configuring the Switch to Use Vendor-Specific RADIUS Attributes
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication
Displaying the RADIUS Configuration
Controlling Switch Access with Kerberos
Understanding Kerberos
Kerberos Operation
7-34
Authenticating to a Boundary Switch
Obtaining a TGT from a KDC
Authenticating to Network Services
Configuring Kerberos
Configuring the Switch for Local Authentication and Authorization
Configuring the Switch for Secure Shell
Understanding SSH
7-38
SSH Servers, Integrated Clients, and Supported Versions
Limitations
7-38
Configuring SSH
7-39
Configuration Guidelines
Setting Up the Switch to Run SSH
Configuring the SSH Server
Displaying the SSH Configuration and Status
Understanding IEEE 802.1x Port-Based Authentication
Device Roles
8-2
Authentication Initiation and Message Exchange
Ports in Authorized and Unauthorized States
IEEE 802.1x Accounting
IEEE 802.1x Accounting Attribute-Value Pairs
IEEE 802.1x Host Mode
Using IEEE 802.1x with Port Security
Using IEEE 802.1x with VLAN Assignment
7-20
7-20
7-20
7-23
7-25
7-28
7-31
7-32
7-32
7-35
7-35
7-35
7-36
7-37
7-39
7-39
7-40
7-41
8-1
8-4
8-5
8-5
8-6
8-7
8-8
7-29
7-29
7-36
7-38
8-1
8-3
7-27
7-31
78-17058-01