Table of Contents
Advertisement
Configuring AAA
2.1.5 Configuring Login Account and Enable Password
The login account and Enable password can be configured locally on the switch or centrally
on the RADIUS/TACACS+ server(s).
On the Switch
The local username and password for login can be configured in the User Management
feature. For details, refer to
To configure the local Enable password for getting administrative privileges, choose the
menu SECURITY > AAA > Global Config to load the following page.
Figure 2-8 Configure Enable Password
There are two options: Clear Password and Set Password. You can choose whether the
local Enable password is required when the guests try to get administrative privileges.
Click Apply.
The logged-in guests can enter the local Enable password on this page to get
Tips:
administrative privileges.
On the Server
The accounts created by the RADIUS/TACACS+ server can only view the configurations
and some network information without the Enable password.
Some configuration principles on the server are as follows:
For Login authentication configuration, more than one login account can be created on
the server. Besides, both the user name and password can be customized.
For Enable password configuration:
On RADIUS server, the user name should be set as $enable$, and the Enable password
is customizable. All the users trying to get administrative privileges share this Enable
password.
On TACACS+ server, configure the value of "enable 15" as the Enable password in the
configuration file. All the users trying to get administrative privileges share this Enable
password.
Managing
System.
AAA Configuration
Configuration Guide
520
Advertisement
Table of Contents
