Configuring Aaa Authentication; Configuring Switch-To-Radius-Server Communication - Cisco Catalyst 3750-X Software Configuration Manual

Chapter 12 Configuring Web-Based Authentication
Authentication global absolute time is 0 minutes
Authentication global init state time is 2 minutes
Authentication Proxy Watch-list is disabled
Authentication Proxy Rule Configuration
Auth-proxy name webauth1
Authentication Proxy Auditing is disabled
Max Login attempts per user is 5

Configuring AAA Authentication

Command
Step 1
aaa new-model
aaa authentication login default group {tacacs+ |
Step 2
radius}
aaa authorization auth-proxy default group {tacacs+
Step 3
| radius}
tacacs-server host {hostname | ip_address}
Step 4
tacacs-server key {key-data}
Step 5
Step 6 copy running-config startup-config
This example shows how to enable AAA:
Switch(config)# aaa new-model
Switch(config)# aaa authentication login default group tacacs+
Switch(config)# aaa authorization auth-proxy default group tacacs+

Configuring Switch-to-RADIUS-Server Communication

RADIUS security servers identification:
•
•
•
•
The combination of the IP address and UDP port number creates a unique identifier, that enables
RADIUS requests to be sent to multiple UDP ports on a server at the same IP address. If two different
host entries on the same RADIUS server are configured for the same service (for example,
authentication) the second host entry that is configured functions as the failover backup to the first one.
The RADIUS host entries are chosen in the order that they were configured.
OL-21521-01
http list not specified inactivity-time 60 minutes
Host name
Host IP address
Host name and specific UDP port numbers
IP address and specific UDP port numbers
Purpose
Enables AAA functionality.
Defines the list of authentication methods at login.
Create an authorization method list for web-based
authorization.
Specify an AAA server. For RADIUS servers, see the
"Configuring Switch-to-RADIUS-Server
Communication" section on page
Configure the authorization and encryption key used
between the switch and the TACACS server.
(Optional) Save your entries in the configuration file.
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
Configuring Web-Based Authentication
12-11.
12-11