Cisco Catalyst 3750-X Software Configuration Manual page 10

Contents
Controlling Switch Access with RADIUS
Controlling Switch Access with Kerberos
Configuring the Switch for Local Authentication and Authorization
Configuring the Switch for Secure Shell
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
x
Default TACACS+ Configuration
Identifying the TACACS+ Server Host and Setting the Authentication Key
Configuring TACACS+ Login Authentication
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services
Starting TACACS+ Accounting
Displaying the TACACS+ Configuration
Understanding RADIUS
10-18
RADIUS Operation
10-19
RADIUS Change of Authorization
Change-of-Authorization Requests
CoA Request Response Code
CoA Request Commands
Stacking Guidelines for Session Termination
Configuring RADIUS
10-26
Default RADIUS Configuration
Identifying the RADIUS Server Host
Configuring RADIUS Login Authentication
Defining AAA Server Groups
Configuring RADIUS Authorization for User Privileged Access and Network Services
Starting RADIUS Accounting
Configuring Settings for All RADIUS Servers
Configuring the Switch to Use Vendor-Specific RADIUS Attributes
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication
Configuring CoA on the Switch
Monitoring and Troubleshooting CoA Functionality
Configuring RADIUS Server Load Balancing
Displaying the RADIUS Configuration
Understanding Kerberos
10-39
Kerberos Operation
10-41
Authenticating to a Boundary Switch
Obtaining a TGT from a KDC
Authenticating to Network Services
Configuring Kerberos
10-42
Understanding SSH
10-45
SSH Servers, Integrated Clients, and Supported Versions
Limitations
10-46
10-13
10-14
10-17
10-17
10-17
10-19
10-20
10-21
10-22
10-25
10-27
10-27
10-29
10-31
10-34
10-35
10-37
10-38
10-39
10-39
10-39
10-42
10-42
10-42
10-44
10-13
10-33
10-35
10-36
10-43
10-45
OL-21521-01
10-16