Configuring Radius Logon Authentication
Remote Authentication Dial-in User Service (RADIUS) is an authentication proto-
col that uses a central server to control access to RADIUS-compliant devices on
the network. A RADIUS server can be programmed with a database of multiple
user name/password pairs and associated privilege levels for each user or group
that requires management access to this switch using the console port, Telnet or
the Web.
When setting up privilege levels on the RADIUS server, level 0 allows guest (CLI
- Normal Exec) access to the switch. Only level 15 allows administrator (CLI -
Privileged Exec) access.
Command Attributes
> Authentication – Select the authentication, or authentication sequence
required:
> Radius – User authentication is performed using a RADIUS server only.
> Local – User authentication is performed only locally by the switch.
> Radius, Local – User authentication is attempted first using a RADIUS server,
then locally by the switch.
> Local, Radius – User authentication is first attempted locally by the switch,
then using a RADIUS server.
> Server IP Address – The IP address of the RADIUS server.
> Server Port Number – The UDP port number used by the RADIUS server.
> Secret Text String – The text string that is shared between the switch and the
RADIUS server.
> Number of Server Transmits – The number of request transmits to the
RADIUS server before failure.
> Timeout for a reply – The number of seconds the switch waits for a reply from
the RADIUS server before it resends the request.
The local switch user database has to be set up by manually entering user names and
passwords using the CLI.
32
