![background image](http://html.mh-extra.com/html/foundry-networks/switch-and-router/switch-and-router_installation-and-configuration-manual_2324275103.webp)
Securing Access to Management Functions
December 2000
3 - 39
When you configure authentication-method lists for RADIUS, you must create a separate authentication-method
list for Telnet or SSH CLI access and for CLI access to the Privileged EXEC level and CONFIG levels of the CLI.
To create an authentication-method list that specifies RADIUS as the primary authentication method for securing
Telnet access to the CLI:
BigIron(config)# enable telnet authentication
BigIron(config)# aaa authentication login default radius local
The commands above cause RADIUS to be the primary authentication method for securing Telnet access to the
CLI. If RADIUS authentication fails due to an error with the server, local authentication is used instead.
To create an authentication-method list that specifies RADIUS as the primary authentication method for securing
access to Privileged EXEC level and CONFIG levels of the CLI:
BigIron(config)# aaa authentication enable default radius local none
The command above causes RADIUS to be the primary authentication method for securing access to Privileged
EXEC level and CONFIG levels of the CLI. If RADIUS authentication fails due to an error with the server, local
authentication is used instead. If local authentication fails, no authentication is used; the device automatically
permits access.
Syntax:
[no] aaa authentication enable | login default <method1> [<method2>] [<method3>] [<method4>]
[<method5>] [<method6>] [<method7>]
The
web-server | enable | login
parameter specifies the type of access this authentication-method list controls.
You can configure one authentication-method list for each type of access.
NOTE:
If you configure authentication for Web management access, authentication is performed each time a
page is requested from the server. When frames are enabled on the Web management interface, the browser
sends an HTTP request for each frame. The Foundry device authenticates each HTTP request from the browser.
To limit authentications to one per page, disable frames on the Web management interface.
The <method1> parameter specifies the primary authentication method. The remaining optional <method>
parameters specify additional methods to try if an error occurs with the primary method. A method can be one of
the values listed in the Method Parameter column in the following table.
Table 3.5: Authentication Method Values
Method Parameter
Description
line
Authenticate using the password you configured for Telnet access. The
Telnet password is configured using the
enable telnet password…
command. See “Setting a Telnet Password” on page 3-9.
enable
Authenticate using the password you configured for the Super User
privilege level. This password is configured using the
enable super-
user-password…
command. See “Setting Passwords for Management
Privilege Levels” on page 3-10.
local
Authenticate using a local user name and password you configured on
the device. Local user names and passwords are configured using the
username…
command. See “Configuring a Local User Account” on
page 3-13.
tacacs
Authenticate using the database on a TACACS server. You also must
identify the server to the device using the
tacacs-server
command.
Authenticate using the database on a server. You also must
identify the server to the device using the
tacacs-server
command.
radius
Authenticate using the database on a RADIUS server. You also must
identify the server to the device using the
radius-server
command.
Summary of Contents for Switch and Router
Page 2: ...December 2000 Copyright 2000 by Foundry Networks Inc ...
Page 26: ...Foundry Switch and Router Installation and Configuration Guide xxvi December 2000 ...
Page 64: ...Foundry Switch and Router Installation and Configuration Guide 2 34 December 2000 ...
Page 162: ...Foundry Switch and Router Installation and Configuration Guide 5 38 December 2000 ...
Page 196: ...Foundry Switch and Router Installation and Configuration Guide 6 34 December 2000 ...
Page 208: ...Foundry Switch and Router Installation and Configuration Guide 7 12 December 2000 ...
Page 236: ...Foundry Switch and Router Installation and Configuration Guide 8 28 December 2000 ...
Page 258: ...Foundry Switch and Router Installation and Configuration Guide 9 22 December 2000 ...
Page 420: ...Foundry Switch and Router Installation and Configuration Guide 13 32 December 2000 ...
Page 442: ...Foundry Switch and Router Installation and Configuration Guide 14 22 December 2000 ...
Page 554: ...Foundry Switch and Router Installation and Configuration Guide 15 112 December 2000 ...
Page 574: ...Foundry Switch and Router Installation and Configuration Guide 16 20 December 2000 ...
Page 626: ...Foundry Switch and Router Installation and Configuration Guide 17 52 December 2000 ...
Page 682: ...Foundry Switch and Router Installation and Configuration Guide 18 56 December 2000 ...
Page 826: ...Foundry Switch and Router Installation and Configuration Guide 20 20 December 2000 ...
Page 994: ...Foundry Switch and Router Installation and Configuration Guide 26 10 December 2000 ...
Page 1004: ...Foundry Switch and Router Installation and Configuration Guide B 6 December 2000 ...
Page 1044: ...Foundry Switch and Router Installation and Configuration Guide C 40 December 2000 ...
Page 1048: ...Foundry Switch and Router Installation and Configuration Guide D 4 December 2000 ...
Page 1070: ...Foundry Switch and Router Installation and Configuration Guide Index 18 December 2000 ...