User Guide
539
Configuring AAA
AAA Configuration
Switch(config)#aaa group
radius
RADIUS1
Switch(aaa-group)#server
192.168.0.10
Switch(aaa-group)#server
192.168.0.20
Switch(aaa-group)#show aaa group
RADIUS1
192.168.0.10
192.168.0.20
Switch(aaa-group)#end
Switch#copy running-config startup-config
2.2.3 Configuring the Method List
A method list describes the authentication methods and their sequence to authenticate
the users. The switch supports Login Method List for users of all types to gain access to
the switch, and Enable Method List for guests to get administrative privileges.
Follow these steps to configure the method list:
Step 1
configure
Enter global configuration mode.
Step 2
aaa authentication login {
method-list
} {
method1
} [
method2
] [
method3
] [
method4
]
Configure a login method list.
method-list
:
Specify a name for the method list.
method1/method2/method3/method4
:
Specify the authentication methods in order. The
first method authenticates a user first, the second method is tried if the previous method
does not respond, and so on. The default methods include radius, tacacs, local and none.
None means no authentication is used for login.
Step 3
aaa authentication enable {
method-list
} {
method1
} [
method2
] [
method3
] [
method4
]
Configure an Enable password method list.
method-list
:
Specify a name for the method list.
method1/method2/method3/method4
:
Specify the authentication methods in order. The
default methods include radius, tacacs, local and none. None means no authentication is
used for getting administrative privileges.
Step 4
show aaa authentication
[ login | enable ]
Verify the configuration method list.
Step 5
end
Return to privileged EXEC mode.
Downloaded from
