Cisco Catalyst 3560-X Series, Software Configuration Manual

Page: 391 / 1538

1-11
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring Web-Based Authentication
Configuring Web-Based Authentication
This example shows how to verify the configuration:
Switch# show ip admission configuration
Authentication Proxy Banner not configured
Authentication global cache time is 60 minutes
Authentication global absolute time is 0 minutes
Authentication global init state time is 2 minutes
Authentication Proxy Watch-list is disabled
Authentication Proxy Rule Configuration
Auth-proxy name webauth1
http list not specified inactivity-time 60 minutes
Authentication Proxy Auditing is disabled
Max Login attempts per user is 5
Configuring AAA Authentication
This example shows how to enable AAA:
Switch(config)# aaa new-model
Switch(config)# aaa authentication login default group
Switch(config)# aaa authorization auth-proxy default group
Configuring Switch-to-RADIUS-Server Communication
RADIUS security servers identification:
•
Host name
•
Host IP address
• Host name and specific UDP port numbers
•
IP address and specific UDP port numbers
Command Purpose
Step 1 aaa new-model Enables AAA functionality.
Step 2
aaa authentication login default group { |
radius }
Defines the list of authentication methods at login.
Step 3 aaa authorization auth-proxy default group {
| radius }
Create an authorization method list for web-based
authorization.
Step 4 tacacs-server host { hostname | ip_address } Specify an AAA server. For RADIUS servers, see the
“Configuring Switch-to-RADIUS-Server
Communication” section on page 1-11
.
Step 5 tacacs-server key { key-data } Configure the authorization and encryption key used
between the switch and the TACACS server.
Step 6
copy running-config startup-config (Optional) Save your entries in the configuration file.