10-11
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
OL-12247-04
Chapter 10 Configuring Web-Based Authentication
Configuring Web-Based Authentication
Authentication global absolute time is 0 minutes
Authentication global init state time is 2 minutes
Authentication Proxy Watch-list is disabled
Authentication Proxy Rule Configuration
Auth-proxy name webauth1
http list not specified inactivity-time 60 minutes
Authentication Proxy Auditing is disabled
Max Login attempts per user is 5
Configuring AAA Authentication
This example shows how to enable AAA:
Switch(config)#
aaa new-model
Switch(config)#
aaa authentication login default group
Switch(config)#
aaa authorization auth-proxy default group
Configuring Switch-to-RADIUS-Server Communication
RADIUS security servers identification:
•
Host name
•
Host IP address
•
Host name and specific UDP port numbers
•
IP address and specific UDP port numbers
The combination of the IP address and UDP port number creates a unique identifier, that enables
RADIUS requests to be sent to multiple UDP ports on a server at the same IP address. If two different
host entries on the same RADIUS server are configured for the same service (for example,
authentication) the second host entry that is configured functions as the failover backup to the first one.
The RADIUS host entries are chosen in the order that they were configured.
Command
Purpose
Step 1
aaa new-model
Enables
AAA
functionality.
Step 2
aaa authentication login default
group
{
|
radius
}
Defines the list of authentication methods at login.
Step 3
aaa authorization auth-proxy
default
group
{
|
radius
}
Create an authorization method list for web-based
authorization.
Step 4
tacacs-server host
{
hostname
|
ip_address
}
Specify an AAA server. For RADIUS servers, see the
“Configuring Switch-to-RADIUS-Server
Communication” section on page 10-11
.
Step 5
tacacs-server key
{
key-data
}
Configure the authorization and encryption key used
between the switch and the TACACS server.
Step 6
copy running-config startup-config
(Optional) Save your entries in the configuration file.
