Configuring Radius Authentication - Cisco WS-C2950SX-48-SI Configuration Manual

Chapter 30 Configuring Switch Access Using AAA
To disable TACACS+ authentication, perform this task in privileged mode:
Task
Step 1
Disable TACACS+ authentication for normal login
mode. Use the console or telnet keywords if you
want to disable TACACS+ only for console port or
Telnet connection attempts.
Step 2 Disable TACACS+ authentication for enable mode.
Use the console or telnet keywords if you want to
disable TACACS+ only for console port or Telnet
connection attempts.
Step 3 Verify the TACACS+ configuration.
This example shows how to disable TACACS+ authentication for console and Telnet connections and
how to verify the configuration:
Console> (enable) set authentication login tacacs disable
tacacs login authentication set to disable for console and telnet session.
Console> (enable) set authentication enable tacacs disable
tacacs enable authentication set to disable for console and telnet session.
Console> (enable) show authentication
Login Authentication:
---------------------
tacacs
radius
local
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Console> (enable)

Configuring RADIUS Authentication

The following sections describe how to configure RADIUS authentication on the switch.
Specifying RADIUS Servers
To specify one or more RADIUS servers, perform this task in privileged mode:
Task
Step 1 Specify the IP address of up to three RADIUS
servers. Specify the primary server using the
primary keyword. Optionally, specify the
destination UDP port to use on the server.
Step 2 Verify the RADIUS server configuration.
78-15486-01
Console Session
----------------
disabled
disabled
enabled(primary)
disabled
disabled
enabled(primary)
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
Command
set authentication login tacacs disable [all |
console | http | telnet]
set authentication enable tacacs disable [all |
console | http | telnet]
show authentication
Telnet Session
----------------
disabled
disabled
enabled(primary)
Telnet Session
disabled
disabled
enabled(primary)
Command
set radius server ip_addr [auth-port
port_number] [primary]
show radius
Configuring Authentication
—
Release 8.1
30-23