Authentication Commands - SMC Networks 6724AL2 Management Manual

C L
OMMAND INE

Authentication Commands

You can configure this switch to authenticate users logging into the system
for management access using local, RADIUS, or TACACS authentication
methods. You can also enable port-based authentication for network client
access using IEEE 802.1x.
Remote Authentication Dial-in User Service (RADIUS) and Terminal
Access Controller Access Control System Plus (TACACS+) are logon
authentication protocols that use software running on a central server to
control access to RADIUS-aware or TACACS+-aware devices on the
network. An authentication server contains a database of multiple user
name/password pairs with associated privilege levels for each user or
group that require management access to a switch.
The switch supports IEEE 802.1x (dot1x) port-based access control that
prevents unauthorized access to the network by requiring users to first
submit credentials for authentication. Client authentication is controlled
centrally by an authentication server using EAP (Extensible
Authentication Protocol).
Command
Authentication Method
authentication login
RADIUS Client
radius-server host
radius-server port
radius-server key
radius-server
retransmit
radius-server timeout Sets the interval between sending
show radius-server
3-154
I
NTERFACE
Function
Defines logon authentication method and
precedence
Specifies the RADIUS server
Sets the RADIUS server network port
Sets the RADIUS encryption key
Sets the number of retries
authentication requests
Shows the current RADIUS settings
Mode Page
GC 3-157
GC 3-158
GC 3-159
GC 3-159
GC 3-160
GC 3-161
PE 3-161