Configuring AAA
Switch(config)#aaa group radius RADIUS1
Switch(aaa-group)#server 192.168.0.10
Switch(aaa-group)#server 192.168.0.20
Switch(aaa-group)#show aaa group RADIUS1
192.168.0.10
192.168.0.20
Switch(aaa-group)#end
Switch#copy running-config startup-config
2.2.3 Configuring the Method List
A method list describes the authentication methods and their sequence to authenticate
the users. The switch supports Login Method List for users of all types to gain access to
the switch, and Enable Method List for guests to get administrative privileges.
Follow these steps to configure the method list:
Step 1
Step 2
Step 3
Step 4
Step 5
Downloaded from
ManualsNet.com
configure
Enter global configuration mode.
aaa authentication login { method-list } { method1 } [ method2 ] [ method3 ] [ method4 ]
Configure a login method list.
method-list
:
Specify a name for the method list.
method1/method2/method3/method4
first method authenticates a user first, the second method is tried if the previous method
does not respond, and so on. The default methods include radius, tacacs, local and none.
None means no authentication is used for login.
aaa authentication enable { method-list } { method1 } [ method2 ] [ method3 ] [ method4 ]
Configure an Enable password method list.
method-list
:
Specify a name for the method list.
method1/method2/method3/method4
default methods include radius, tacacs, local and none. None means no authentication is
used for getting administrative privileges.
show aaa authentication [ login | enable ]
Verify the configuration method list.
end
Return to privileged EXEC mode.
search engine
:
Specify the authentication methods in order. The
:
Specify the authentication methods in order. The
AAA Configuration
User Guide
539