Cisco 350 Series Administration Manual page 487

17
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
Secure Sensitive Data Management
344
Similarly, if authorization is not enabled, and authentication fails for a method, the device
stops the authentication attempt.
To define authentication methods for an access method:
Click Security > Management Access Authentication.
Enter the Application (type) of the management access method.
Select Authorization to enable both authentication and authorization of the user by the list of
methods described below. If the field is not selected, only authentication is performed. If
Authorization is enabled, the read/write privileges of users are checked. This privilege level is
set in the User Accounts page.
Use the arrows to move the authentication method between the Optional Methods column
and the Selected Methods column. The first method selected is the first method that is used.
• RADIUS—User is authorized/authenticated on a RADIUS server. You must have
configured one or more RADIUS servers. For the RADIUS server to grant access to the
web-based configuration utility, the RADIUS server must return cisco-avpair =
shell:priv-lvl=15.
• TACACS+—User authorized/authenticated on the TACACS+ server. You must have
configured one or more TACACS+ servers.
• None—User is allowed to access the device without authorization/authentication.
• Local—Username and password are checked against the data stored on the local device.
These username and password pairs are defined in the User Accounts page.
The Local or None authentication method must always be selected last. All
NOTE
authentication methods selected after Local or None are ignored.
Click Apply. The selected authentication methods are associated with the access method.
See Security: Secure Sensitive Data Management.
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
Secure Sensitive Data Management
Security