Cisco WS-C2950SX-48-SI Configuration Manual page 476

Configuring Authentication
This example shows how to enable Kerberos as the login authentication method for Telnet and verify the
configuration:
Console> (enable) set authentication login kerberos enable telnet
kerberos login authentication set to enable for telnet session.
Console> (enable) show authentication
Login Authentication: Console Session
---------------------
tacacs
radius
kerberos
local
Enable Authentication:Console Session
---------------------- ----------------- ----------------
tacacs
radius
kerberos
local
Console> (enable)
This example shows how to enable Kerberos as the login authentication method for the console and
verify the configuration:
Console> (enable) set authentication login kerberos enable console
kerberos login authentication set to enable for console session.
Console> (enable) show authentication
Login Authentication: Console Session
---------------------
tacacs
radius
kerberos
local
Enable Authentication:Console Session
---------------------- ----------------- ----------------
tacacs
radius
kerberos
local
Console> (enable)
Defining the Kerberos Local-Realm
The Kerberos realm is a domain consisting of users, hosts, and network services that are registered to a
Kerberos server. To authenticate a user defined in the Kerberos database, the switch must know the host
name or IP address of the host running the KDC and the name of the Kerberos realm.
To configure the switch to authenticate to the KDC in a specified Kerberos realm, perform this task in
privileged mode:
Task
Define the default realm for the switch.
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
30-32
Telnet Session
---------------- ----------------
disabled disabled
disabled disabled
disabled enabled(primary)
enabled(primary) enabled
Telnet Session
disabled disabled
disabled disabled
disabled enabled(primary)
enabled(primary) enabled
Telnet Session
---------------- ----------------
disabled disabled
disabled disabled
enabled(primary) enabled(primary)
enabled enabled
Telnet Session
disabled disabled
disabled disabled
enabled(primary) enabled(primary)
enabled enabled
Command
set kerberos local-realm kerberos-realm
Chapter 30 Configuring Switch Access Using AAA
—
Release 8.1
78-15486-01