Cisco Catalyst 3750 Software Configuration Manual page 7

Controlling Switch Access with TACACS+
Controlling Switch Access with RADIUS
Controlling Switch Access with Kerberos
Configuring the Switch for Local Authentication and Authorization
78-15870-01
Configuring Username and Password Pairs
Configuring Multiple Privilege Levels
Setting the Privilege Level for a Command
Changing the Default Privilege Level for Lines
Logging into and Exiting a Privilege Level
Understanding TACACS+
TACACS+ Operation
7-12
Configuring TACACS+
7-12
Default TACACS+ Configuration
Identifying the TACACS+ Server Host and Setting the Authentication Key
Configuring TACACS+ Login Authentication
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services
Starting TACACS+ Accounting
Displaying the TACACS+ Configuration
Understanding RADIUS
7-18
RADIUS Operation
7-19
Configuring RADIUS
7-20
Default RADIUS Configuration
Identifying the RADIUS Server Host
Configuring RADIUS Login Authentication
Defining AAA Server Groups
Configuring RADIUS Authorization for User Privileged Access and Network Services
Starting RADIUS Accounting
Configuring Settings for All RADIUS Servers
Configuring the Switch to Use Vendor-Specific RADIUS Attributes
Configuring the Switch for Vendor-Proprietary RADIUS Server Communication
Displaying the RADIUS Configuration
Understanding Kerberos
7-32
Kerberos Operation
7-34
Authenticating to a Boundary Switch
Obtaining a TGT from a KDC
Authenticating to Network Services
Configuring Kerberos
7-35
7-6
7-8
7-8
7-9
7-10
7-10
7-10
7-13
7-14
7-16
7-17
7-17
7-20
7-20
7-23
7-25
7-28
7-28
7-31
7-31
7-34
7-35
7-35
Catalyst 3750 Metro Switch Software Configuration Guide
Contents
7-13
7-27
7-29
7-30
7-36
7-16
vii