Cisco 2975 - Catalyst LAN Base Switch, Руководство по настройке программного обеспечения

Страница: 206 / 982

9-10
Catalyst 2975 Switch Software Configuration Guide
OL-19720-02
Chapter 9 Configuring Switch-Based Authentication
Controlling Switch Access with
Logging into and Exiting a Privilege Level
Beginning in privileged EXEC mode, follow these steps to log in to a specified privilege level and to exit
to a specified privilege level:
Controlling Switch Access with
This section describes how to enable and configure Terminal Access Controller Access Control System
Plus (), which provides detailed accounting information and flexible administrative control
over authentication and authorization processes. is facilitated through authentication,
authorization, accounting (AAA) and can be enabled only through AAA commands.
Note For complete syntax and usage information for the commands used in this section, see the Cisco IOS
Security Command Reference, Release 12.2 .
These sections contain this configuration information:
•
Understanding , page 9-10
• Operation, page 9-12
•
Configuring , page 9-13
• Displaying the Configuration, page 9-18
Understanding
is a security application that provides centralized validation of users attempting to gain access
to your switch. services are maintained in a database on a daemon typically
running on a UNIX or Windows NT workstation. You should have access to and should configure a
server before the configuring features on your switch.
Note
We recommend a redundant connection between a switch stack and the server. This is to help
ensure that the server remains accessible in case one of the connected stack members is
removed from the switch stack.
provides for separate and modular authentication, authorization, and accounting facilities.
allows for a single access control server (the daemon) to provide each
service—authentication, authorization, and accounting—independently. Each service can be tied into its
own database to take advantage of other services available on that server or on the network, depending
on the capabilities of the daemon.
Command Purpose
Step 1 enable level Log in to a specified privilege level.
For level , the range is 0 to 15.
Step 2 disable level Exit to a specified privilege level.
For level , the range is 0 to 15.