Table of Contents
Advertisement
Configuring Security
Configuring RADIUS Servers
STEP 6
Configuring RADIUS Servers
NOTE
STEP 1
STEP 2
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x
•
Authentication IP Port—Enter the port number through which the
TACACS+ session occurs. The default is port 49.
Click Apply. The TACACS+ server is added, and the Running Configuration is
updated.
An organization can establish a Remote Authorization Dial-In User Service
(RADIUS) server to provide provide a centralized 802. 1 X or MAC-based network
access control for all of its devices. The switch can act as a RADIUS client that
uses the RADIUS server to provide centralized security, authorizing, and
authenticating users attempting to access and administer the switch.
To use a RADIUS server, you should open an account for the switch on the RADIUS
server, configure that RADIUS server along with the other parameters on the
RADIUS page.
If more than one RADIUS server has been configured, the switch uses the
configured priorities of the available RADIUS servers to select the RADIUS server
to be used by the switch.
To set the default RADIUS parameters and add a RADIUS server:
Click Security > RADIUS.
In the Use Default Parameters area, enter the default RADIUS parameters that
are applied to all RADIUS servers. If a value is not entered for a specific server, the
switch uses the values in these fields.
•
Retries—Enter the number of transmitted requests that are sent to the
RADIUS server before a failure is considered to have occurred.
•
Timeout for Reply—Enter the number of seconds that the switch waits for
an answer from the RADIUS server before retrying the query, or switching to
the next server.
•
Key String—Enter the default key string used for authenticating and
encrypting between the switch and the RADIUS server. This key must match
the key configured on the RADIUS server. A key string is used to encrypt
16
184
Advertisement
Table of Contents
