21-17
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
78-13315-02
Chapter 21 Configuring Switch Access Using AAA
Configuring Authentication
Step 3
At the “Enter Password” prompt, press
Return
. The login password is null for 30 seconds when you are
connected to the console port.
Step 4
Enter privileged mode using the
enable
command.
Step 5
At the “Enter Password” prompt, press
Return
. (The enable password is null for 30 seconds when you
are connected to the console port.)
Step 6
Enter the
set password
or
set enablepass
command, as appropriate.
Step 7
When prompted for your old password, press
Return
.
Step 8
Enter and confirm your new password.
Configuring Authentication
These sections describe how to configure authentication on the switch:
•
Specifying Servers, page 21-17
•
Enabling Authentication, page 21-18
•
Specifying the Key, page 21-19
•
Specifying the Timeout Interval, page 21-19
•
Specifying the Login Attempts, page 21-20
•
Enabling Directed Request, page 21-21
•
Disabling Directed Request, page 21-21
•
Clearing Servers, page 21-22
•
Clearing the Key, page 21-22
•
Disabling Authentication, page 21-23
Specifying Servers
Specify one or more servers before you enable authentication on the switch. The
first server you specify is the primary server, unless you explicitly make one server the primary using
the
primary
keyword.
To specify one or more servers, perform this task in privileged mode:
This example shows how to specify servers and verify the configuration:
Console> (enable)
set tacacs server 172.20.52.3
172.20.52.3 added to TACACS server table as primary server.
Console> (enable)
set tacacs server 172.20.52.2 primary
172.20.52.2 added to TACACS server table as primary server.
Console> (enable)
set tacacs server 172.20.52.10
172.20.52.10 added to TACACS server table as backup server.
Console> (enable)
Task
Command
Step 1
Specify the IP address of one or more
servers.
set tacacs server
ip_addr
[
primary
]
Step 2
Verify the configuration.
show tacacs
