Cisco 220 Series Smart Plus Administration Manual page 196

Configuring Security
Configuring Management Access Authentication
STEP 1
STEP 2
STEP 3
STEP 4
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x
If an authentication method fails or the user has insufficient privilege level, the user
is denied access to the switch. In other words, if authentication fails at an
authentication method, the switch stops the authentication attempt; it does not
continue and does not attempt to use the next authentication method.
To define authentication methods for an access method:
Click Security > Management Access Authentication.
Select an access method from the Application drop-down menu.
Use the arrows to move the authentication method between the Optional
Methods column and the Selected Methods column. The first method selected is
the first method that is used.
• RADIUS—User is authenticated on a RADIUS server. You must have
configured one or more RADIUS servers.
• TACACS+—User is authenticated on a TACACS+ server. You must have
configured one or more TACACS+ servers.
• None—User is allowed to access the switch without authentication.
• Local—Username and password are checked against the data stored on the
local switch. These username and password pairs are defined on the User
Accounts Page.
The Local or None authentication method must always be selected last. All
NOTE
authentication methods selected after Local or None are ignored.
Click Apply. The selected authentication methods are associated with the access
method, and the Running Configuration is updated.
16
194