Table of Contents
Advertisement
Configuring Security
Configuring Management Access Authentication
STEP 3
STEP 4
Configuring Management Access Authentication
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x
You can modify the above default settings in the following fields:
•
Minimal Password Length—Enter the minimal number of characters
required for passwords.
A zero-length password (no password) is allowed, and can still have
NOTE
password aging assigned to it.
•
Allowed Character Repetition—Enter the number of times that a character
can be repeated.
•
Minimal Number of Character Classes—Enter the number of character
classes which must be present in a password. Character classes are lower
case, upper case, digits, and symbols or special characters.
•
The New Password Must Be Different than the Current One—If selected,
the new password cannot be the same as the current password upon a
password change.
•
The New Password Must Be Different than the User Name—If selected,
the new password cannot be the same as the current username upon a
password change.
Click Apply. The password complexity settings are defined, and the Running
Configuration is updated.
You can assign authentication methods to the various management access
methods, such as SSH, console, Telnet, HTTP, and HTTPS. This authentication can
be performed locally or on an external server, such as a TACACS+ or a RADIUS
server.
For the RADIUS server to grant access to the web-based interface, the RADIUS
server must return cisco-avpair = shell:priv-lvl=15.
User authentication occurs in the order that the authentication methods are
selected. If the first authentication method is not available, the next selected
method is used. For example, if the selected authentication methods are RADIUS
and Local, and all configured RADIUS servers are queried in priority order and do
not reply, the user is authenticated locally.
16
193
Advertisement
Table of Contents
