Authentication Example - Cisco WS-C2948G-GE-TX Configuration Manual

Chapter 30 Configuring Switch Access Using AAA
To display the Kerberos credentials, perform this task in privileged mode:
Task
Display the Kerberos credentials.
This example shows how to display the Kerberos credentials:
Console> (enable) show kerberos creds
No Kerberos credentials.
Console> (enable)
To clear all Kerberos credentials, perform this task in privileged mode:
Task
Clear all Kerberos credentials.
This example shows how to clear all Kerberos credentials from the switch:
Console> (enable) clear kerberos creds
Console> (enable)

Authentication Example

Figure 30-3
authentication is enabled and local authentication is disabled for both login and enable access to the
switch for all Telnet connections. When Workstation A attempts to connect to the switch, the user is
challenged for a TACACS+ username and password.
Only local authentication is enabled for both login and enable access on the console port. Any user with
access to the directly connected terminal can access the switch using the login and enable passwords.
Figure 30-3 Example of a TACACS+ Network Topology
TACACS+
172.20.52.10
Workstation A
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
78-15908-01
shows a simple network topology using TACACS+. In this example, TACACS+
server
Switch
Command
show kerberos creds
Command
clear kerberos creds
Console port
connection
Terminal
Authentication Example
30-39