7-25
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-07
Chapter 7 Configuring Switch-Based Authentication
Controlling Switch Access with RADIUS
To disable AAA, use the
no aaa new-model
global configuration command. To disable AAA
authentication, use the
no aaa authentication login
{
default
|
list-name
}
method1
[
method2...
] global
configuration command. To either disable RADIUS authentication for logins or to return to the default
value, use the
no login authentication
{
default
|
list-name
} line configuration command.
Defining AAA Server Groups
You can configure the switch to use AAA server groups to group existing server hosts for authentication.
You select a subset of the configured server hosts and use them for a particular service. The server group
is used with a global server-host list, which lists the IP addresses of the selected server hosts.
Server groups also can include multiple host entries for the same server if each entry has a unique
identifier (the combination of the IP address and UDP port number), allowing different ports to be
individually defined as RADIUS hosts providing a specific AAA service. If you configure two different
host entries on the same RADIUS server for the same service, (for example, accounting), the second
configured host entry acts as a fail-over backup to the first one.
You use the
server
group server configuration command to associate a particular server with a defined
group server. You can either identify the server by its IP address or identify multiple host instances or
entries by using the optional
auth-port
and
acct-port
keywords.
Step 5
login authentication
{
default
|
list-name
}
Apply the authentication list to a line or set of lines.
•
If you specify
default
, use the default list created with the
aaa
authentication login
command.
•
For
list-name
, specify the list created with the
aaa authentication
login
command.
Step 6
end
Return to privileged EXEC mode.
Step 7
show running-config
Verify your entries.
Step 8
copy running-config startup-config
(Optional) Save your entries in the configuration file.
Command
Purpose
Summary of Contents for ME 3400 Series
Page 40: ...Contents xl Cisco ME 3400 Ethernet Access Switch Software Configuration Guide OL 9639 07 ...
Page 44: ...xliv Cisco ME 3400 Ethernet Access Switch Software Configuration Guide OL 9639 07 Preface ...
Page 1138: ...Index IN 52 Cisco ME 3400 Ethernet Access Switch Software Configuration Guide OL 9639 07 ...
