Cisco IE 4000, Software Configuration Manual

Page: 182 / 1066

178
Configuring Switch-Based Authentication
How to Configure Switch-Based Authentication
Configuring the Switch for Local Authentication and Authorization
4. client { ip-address | name } [ vrf vrfname ]
[ server-key string ]
Enters dynamic authorization local server configuration mode and
specifies a RADIUS client from which a device will accept CoA and
disconnect requests.
5. server-ke y [ 0 | 7 ] string Configures the RADIUS key to be shared between a device and RADIUS
clients.
6. port port-number Specifies the port on which a device listens for RADIUS requests from
configured RADIUS clients.
7. auth-type { any | all | session-key } Specifies the type of authorization the switch uses for RADIUS clients.
The client must match all the configured attributes for authorization.
8. ignore session-key (Optional) Configures the switch to ignore the session-key.
9. ignore server-key (Optional) Configures the switch to ignore the server-key.
10. authentication command bounce-port
ignore (Optional) Configures the switch to ignore a CoA request to temporarily
disable the port hosting a session. The purpose of temporarily disabling
the port is to trigger a DHCP renegotiation from the host when a VLAN
change occurs and there is no supplicant on the endpoint to detect the
change.
11. authentication command disable-port
ignore (Optional) Configures the switch to ignore a nonstandard command
requesting that the port hosting a session be administratively shut down.
Shutting down the port results in termination of the session.
Uses standard CLI or SNMP commands to reenable the port.
12. end Returns to privileged EXEC mode.
Command Purpose
Command Purpose
1. configure terminal Enters global configuration mode.
2. aaa new-model Enables AAA.
3. aaa authentication login default
local Sets the login authentication to use the local username database. The default
keyword applies the local user database authentication to all ports.
4. aaa authorization exec local Configures user AAA authorization, checks the local database, and allows the
user to run an EXEC shell.
5. aaa authorization network local Configures user AAA authorization for all network-related service requests.