Configuring Radius Authentication - Cisco WS-X6066-SLB-APC - Content Switching Module Software Manual

Chapter 21 Configuring Switch Access Using AAA
Disabling TACACS+ Authentication
When local authentication is disabled and only TACACS+ authentication is enabled, if you disable
TACACS+ authentication, local authentication is reenabled automatically.
To disable TACACS+ authentication, perform this task in privileged mode:
Task
Step 1 Disable TACACS+ authentication for normal
login mode. Enter the console or telnet keyword
if you want to disable TACACS+ only for console
port or Telnet connection attempts.
Step 2
Disable TACACS+ authentication for enable
mode. Enter the console or telnet keyword if you
want to disable TACACS+ only for console port
or Telnet connection attempts.
Step 3 Verify the TACACS+ configuration.
This example shows how to disable TACACS+ authentication for console and Telnet connections and
how to verify the configuration:
Console> (enable) set authentication login tacacs disable
tacacs login authentication set to disable for console and telnet session.
Console> (enable) set authentication enable tacacs disable
tacacs enable authentication set to disable for console and telnet session.
Console> (enable) show authentication
Login Authentication:
---------------------
tacacs
radius
local
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Console> (enable)

Configuring RADIUS Authentication

These sections describe how to configure RADIUS authentication on the switch:
•
•
•
•
•
•
•
78-13315-02
Console Session
----------------
disabled
disabled
enabled(primary)
disabled
disabled
enabled(primary)
Specifying RADIUS Servers, page 21-24
Specifying the RADIUS Key, page 21-24
Enabling RADIUS Authentication, page 21-25
Specifying the RADIUS Timeout Interval, page 21-27
Specifying the RADIUS Retransmit Count, page 21-27
Specifying the RADIUS Deadtime, page 21-28
Clearing RADIUS Servers, page 21-29
Command
set authentication login tacacs disable [all |
console | http | telnet]
set authentication enable tacacs disable [all |
console | http | telnet]
show authentication
Telnet Session
----------------
disabled
disabled
enabled(primary)
Telnet Session
disabled
disabled
enabled(primary)
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
Configuring Authentication
21-23