Cisco Small Business 200, Руководство администратора

Страница: 264 / 351

Security
Configuring Management Access Authentication
251 Cisco Small Business 200 Series Smart Switch Administration Guide
17
• Authentication Port —Enter the UDP port number of the RADIUS server port
for authentication requests.
• Retries —Enter the number of requests that are sent to the RADIUS server
before a failure is considered to have occurred. If Use Default is selected, the
device uses the default value for the number of retries.
• Dead Time —Enter the number of minutes that must pass before a non-
responsive RADIUS server is bypassed for service requests. If Use Default
is selected, the device uses the default value for the dead time. If you enter
0 minutes, there is no dead time.
• Usage Type —Enter the RADIUS server authentication type. The options are:
- Login —RADIUS server is used for authenticating users that ask to
administer the device.
- 802.1X —RADIUS server is used for 802.1x authentication.
- All —RADIUS server is used for authenticating user that ask to administer
the device and for 802.1X authentication.
STEP 5
To display sensitive data in plaintext form in the configuration file, click Display
Sensitive Data As Plaintext .
STEP 6
Click Apply . The RADIUS server definition is added to the Running Configuration
file of the device.
Configuring Management Access Authentication
You can assign authentication methods to the various management access
methods, such as SSH, console, HTTP, and HTTPS. The authentication can be
performed locally or on a RADIUS server.
For the RADIUS server to grant access to the web-based configuration utility, the
RADIUS server must return cisco-avpair = shell:priv-lvl=15.
User authentication occurs in the order that the authentication methods are
selected. If the first authentication method is not available, the next selected
method is used. For example, if the selected authentication methods are RADIUS
and Local, and all configured RADIUS servers are queried in priority order and do
not reply, the user is authenticated locally.