Configuring And Enabling Radius - Allen-Bradley Stratix 5100 User Manual

Configuring and Enabling
RADIUS
Configuring RADIUS and TACACS+ Servers
This chapter describes how to enable and configure the Remote Authentication
Dial-In User Service (RADIUS) and Terminal Access Controller Access Control
System Plus (TACACS+), that provides detailed accounting information and
flexible administrative control over authentication and authorization processes.
RADIUS and TACACS+ are facilitated through AAA and can be enabled only
through commands.
AAA
Topic

Configuring and Enabling RADIUS

Configuring the Access Point to Use Vendor-specific RADIUS Attributes
Configuring the Access Point for Vendor-proprietary RADIUS Server Communication
Configuring and Enabling TACACS+
Configuring and Enabling TACACS+
You can configure your access point as a local authenticator to provide a back-
TIP
up for your main server or to provide authentication service on a network
without a RADIUS server.
detailed instructions on configuring your access point as a local authenticator.
For complete syntax and usage information for the commands used in this
chapter, see the Cisco IOS Security Command Reference for Release
RADIUS is a distributed client/server system that secures networks against
unauthorized access. RADIUS clients run on supported Cisco devices and send
authentication requests to a central RADIUS server, that contains all user
authentication and network service access information. The RADIUS host is
normally a multiuser system running RADIUS server software from Cisco
Secure Access Control Server version 3.0), Livingston, Merit, Microsoft, or
another software provider. For more information, refer to the RADIUS server
documentation.
Use RADIUS in these network environments that require access security.
• Networks with multiple-vendor access servers, each supporting RADIUS.
For example, access servers from several vendors use a single RADIUS
server-based security database. In an IP-based network with multiple
vendors' access servers, dial-in users are authenticated through a RADIUS
server that is customized to work with the Kerberos security system.
Rockwell Automation Publication 1783-UM006A-EN-P - May 2014
Chapter
Page
407
424
425
431
431
Configuring Authentication Types on page 351
14
for
12.3.
407