![background image](http://html1.mh-extra.com/html/smc-networks/6724al2/6724al2_management-manual_1300175342.webp)
C
OMMAND
L
INE
I
NTERFACE
3-154
Authentication Commands
You can configure this switch to authenticate users logging into the system
for management access using local, RADIUS, or TACACS authentication
methods. You can also enable port-based authentication for network client
access using IEEE 802.1x.
Remote Authentication Dial-in User Service (RADIUS) and Terminal
Access Controller Access Control System Plus () are logon
authentication protocols that use software running on a central server to
control access to RADIUS-aware or -aware devices on the
network. An authentication server contains a database of multiple user
name/password pairs with associated privilege levels for each user or
group that require management access to a switch.
The switch supports IEEE 802.1x (dot1x) port-based access control that
prevents unauthorized access to the network by requiring users to first
submit credentials for authentication. Client authentication is controlled
centrally by an authentication server using EAP (Extensible
Authentication Protocol).
Command
Function
Mode Page
Authentication Method
authentication login
Defines logon authentication method and
precedence
GC
3-157
RADIUS Client
radius-server host
Specifies the RADIUS server
GC
3-158
radius-server port
Sets the RADIUS server network port
GC
3-159
radius-server key
Sets the RADIUS encryption key
GC
3-159
radius-server
retransmit
Sets the number of retries
GC
3-160
radius-server timeout Sets the interval between sending
authentication requests
GC
3-161
show radius-server
Shows the current RADIUS settings
PE
3-161
Summary of Contents for 6724AL2
Page 2: ......
Page 404: ...COMMAND LINE INTERFACE 3 216 ...
Page 406: ...TROUBLESHOOTING A 2 ...
Page 418: ...GLOSSARY Glossary 8 ...
Page 422: ...INDEX Index 4 ...
Page 423: ......