Cisco Catalyst 3750-X User Manual

12-11
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-21521-01
Chapter 12 Configuring Web-Based Authentication
Configuring Web-Based Authentication
Authentication global absolute time is 0 minutes
Authentication global init state time is 2 minutes
Authentication Proxy Watch-list is disabled
Authentication Proxy Rule Configuration
Auth-proxy name webauth1
http list not specified inactivity-time 60 minutes
Authentication Proxy Auditing is disabled
Max Login attempts per user is 5
Configuring AAA Authentication
This example shows how to enable AAA:
Switch(config)# aaa new-model
Switch(config)# aaa authentication
login default group tacacs+
Switch(config)# aaa authorization
auth-proxy default group tacacs+
Configuring Switch-to-RADIUS-Server Communication
RADIUS security servers identification:
• Host name
• Host IP address
• Host name and specific UDP port numbers
• IP address and specific UDP port numbers
The combination of the IP address and
UDP port number creates a unique identifier, that enables
RADIUS requests to be sent to multiple UDP ports on a server at the same IP address. If two different
host entries on the same RADIUS server are configured for the same service (for example,
authentication) the second host entry that is configured functions as the failover backup to the first one.
The RADIUS host entries are chosen in the order that they were configured.
Command Purpose
Step 1
aaa new-model Enables AAA functionality.
Step 2
aaa authentication login default group {tacacs+ |
radius}
Defines the list of authentication methods at login.
Step 3
aaa authorization auth-proxy default group {tacacs+
| radius}
Create an authorization method list for web-based
authorization.
Step 4
tacacs-server host {hostname | ip_address} Specify an AAA server. For RADIUS servers, see the
“Configuring Switch-to-RADIUS-Server
Communication” section on page 12-11.
Step 5
tacacs-server key {key-data} Configure the authorization and encryption key used
between the switch and the TACACS server.
Step 6
copy running-config startup-config (Optional) Save your entries in the configuration file.

Cisco Catalyst 3750-X Specifications

General

Brand	Cisco
Model	Catalyst 3750-X
Category	Switch
Language	English