Cisco WS-X6066-SLB-APC - Content Switching Module Software Manual page 436

Configuring Authentication
To set up the RADIUS username and enable RADIUS authentication, perform this task in privileged
mode:
Step 1 Enable RADIUS authentication for normal login
mode. Enter the console or telnet keyword if you
want to enable RADIUS only for console port or
Telnet connection attempts.
Step 2
Enable RADIUS authentication for enable mode.
Enter the console or telnet keyword if you want
to enable RADIUS only for console port or Telnet
connection attempts.
Create a user $enab15$ on the RADIUS server,
Step 3
and assign a password to that user.
Step 4
Verify the RADIUS configuration.
To use RADIUS authentication for enable mode, you will need to create a user $enab15$ on the
Note
RADIUS server, and assign a password to that user. This user needs to be created in addition to your
assigned username and password on the RADIUS server (example: username john, password hello.)
After you log in to the Catalyst 6000 family switch with your assigned username and password
(john/hello), you can enter enable mode using the password assigned to the $enab15$ user.
If your RADIUS server does not support the $enab15$ username, you can set the service-type
attribute (attribute 6) to Administrative (value 6) for a RADUIS user to directly launch the user into
enable mode without asking for a separate enable password.
This example shows how to enable RADIUS authentication and verify the configuration:
Console> (enable) set authentication login radius enable
radius login authentication set to enable for console and telnet session.
Console> (enable) set authentication enable radius enable
radius enable authentication set to enable for console and telnet session.
Console> (enable) show authentication
Login Authentication:
---------------------
tacacs
radius
local
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Console> (enable)
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
21-26
set authentication login radius enable [all |
console | http | telnet] [primary]
set authentication enable radius enable [all |
console | http | telnet] [primary]
See the Note below for additional information.
show authentication
Console Session Telnet Session
---------------- ----------------
disabled disabled
enabled(primary) enabled(primary)
enabled enabled
Telnet Session
disabled disabled
enabled(primary) enabled(primary)
enabled enabled
Chapter 21 Configuring Switch Access Using AAA
78-13315-02