TACACS+ Operation 41
Method List Description 42
TACACS+ Configuration Options 42
TACACS+ Login Authentication 42
TACACS+ Authorization for Privileged EXEC Access and Network Services 42
TACACS+ Accounting 43
Default TACACS+ Configuration 43
How to Configure TACACS+ 43
Identifying the TACACS+ Server Host and Setting the Authentication Key 43
Configuring TACACS+ Login Authentication 45
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 47
Starting TACACS+ Accounting 48
Establishing a Session with a Router if the AAA Server is Unreachable 49
Monitoring TACACS+ 50
CHAPTER 6
Configuring RADIUS 51
Finding Feature Information 51
Prerequisites for Controlling Switch Access with RADIUS 51
Restrictions for Controlling Switch Access with RADIUS 52
Information about RADIUS 53
RADIUS and Switch Access 53
RADIUS Overview 53
RADIUS Operation 54
RADIUS Change of Authorization 55
Change-of-Authorization Requests 55
RFC 5176 Compliance 56
CoA Request Response Code 57
Session Identification 57
CoA ACK Response Code 58
CoA NAK Response Code 58
CoA Request Commands 58
Session Reauthentication 58
Session Reauthentication in a Switch Stack 59
Session Termination 59
CoA Disconnect-Request 60
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 v
Contents