39-28
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Configuring Authentication on the Switch
To set up the RADIUS username and enable RADIUS authentication, perform this task in privileged
mode:
Note
To use RADIUS
authentication
for enable mode, you must create a user
$enab15$ on the
RADIUS server and assign a password to that user. This user needs to be created in addition to
your assigned username and password on the RADIUS server (for example, the username is
john, and the password is hello). After you log in to the Catalyst 6500 series switch with your
assigned username and password (john/hello), you can enter enable mode using the password
that is assigned to the $enab15$ user.
If your RADIUS server does not support the $enab15$ username, you can
set the service-type
attribute (attribute 6) to Administrative (value 6) for a RADUIS user to directly launch the user
into enable mode without asking for a separate enable password.
This example shows how to enable RADIUS authentication and verify the configuration:
Console> (enable)
set authentication login radius enable
radius login authentication set to enable for console and telnet session.
Console> (enable)
set authentication enable radius enable
radius enable authentication set to enable for console and telnet session.
Console> (enable)
show authentication
Login Authentication: Console Session Telnet Session
--------------------- ---------------- ----------------
tacacs disabled disabled
radius enabled(primary) enabled(primary)
local enabled enabled
Enable Authentication: Console Session Telnet Session
---------------------- ----------------- ----------------
tacacs disabled disabled
radius enabled(primary) enabled(primary)
local enabled enabled
Console> (enable)
Task
Command
Step 1
Enable RADIUS authentication
for normal login mode. Enter the
console
or
telnet
keyword if you
want to enable RADIUS only for
the console port or Telnet
connection attempts.
set authentication login radius enable
[
all
|
console
|
http
|
telnet
] [
primary
]
Step 2
Enable RADIUS authentication
for enable mode. Enter the
console
or
telnet
keyword if you want to
enable RADIUS only for the
console port or Telnet connection
attempts.
set authentication enable radius enable
[
all
|
console
|
http
|
telnet
] [
primary
]
Step 3
Create a user
$enab15$ on the
RADIUS server and assign a
password to that user.
See the Note below for additional information.
Step 4
Verify the RADIUS configuration.
show authentication
