Cisco Catalyst 4500 Series, Руководство по настройке программного обеспечения

Страница: 163 / 2086

3-19
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 3 Configuring the Switch for the First Time
Controlling Access to Privileged EXEC Commands
To remove the specified server name or address, use the no tacacs-server host hostname
global configuration command. To remove a server group from the configuration list, use the no aaa
group server group-name global configuration command. To remove the IP address of a
server, use the no server ip-address server group subconfiguration command.
Configuring Login Authentication
To configure AAA authentication, define a named list of authentication methods and then apply that list
to various ports. The method list defines the types of authentication you intend to perform and the
sequence in which you intend to perform them; you must apply the list to a specific port before you can
perform any of the defined authentication methods. The only exception is the default method list (which,
by coincidence, is named
default ). The default method list is automatically applied to all ports except
those that have a named method list explicitly defined. A defined method list overrides the default
method list.
A method list describes the sequence and authentication methods that must be queried to authenticate a
user. You can designate one or more security protocols for authentication, ensuring a backup system for
authentication in case the initial method fails. The software uses the first method listed to authenticate
users; if that method fails to respond, the software selects the next authentication method in the method
list. This process continues until there is successful communication with a listed authentication method
or until all defined methods are exhausted. If authentication fails at any point in this cycle—meaning that
the security server or local username database responds by denying the user access—the authentication
process stops, and no other authentication methods are attempted.
To configure login authentication, perform this task, beginning in privileged EXEC mode:
Step 7
show tacacs
Verifies your entries.
Step 8
copy running-config startup-config (Optional) Saves your entries in the configuration file.
Command Purpose
Command Purpose
Step 1
configure terminal
Enters global configuration mode.
Step 2
aaa new-model
Enables AAA.