Configuring Switch Access Using AAA
This chapter describes how to configure authentication, authorization, and accounting (AAA) to monitor
and control access to the command-line interface (CLI) on the Catalyst enterprise LAN switches.
Note
For complete syntax and usage information for the commands used in this chapter, refer to the Command
Reference—Catalyst 4000 Family, Catalyst 2948G, and Catalyst 2980G Switches.
This chapter consists of these sections:
•
•
•
•
•
•
•
•
•
Understanding How Authentication Works
These sections describe how the different authentication methods work:
•
•
•
•
•
•
•
78-12647-02
Understanding How Authentication Works, page 27-1
Configuring Authentication, page 27-9
Authentication Example, page 27-47
Understanding How Authorization Works, page 27-49
Configuring Authorization, page 27-51
Authorization Example, page 27-54
Understanding How Accounting Works, page 27-55
Configuring Accounting, page 27-58
Accounting Example, page 27-62
Authentication Overview, page 27-2
Understanding How Login Authentication Works, page 27-2
Understanding How Local Authentication Works, page 27-2
Understanding How TACACS+ Authentication Works, page 27-3
Understanding How RADIUS Authentication Works, page 27-4
Understanding How Kerberos Authentication Works, page 27-4
Understanding How 802.1x Authentication Works, page 27-7
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
C H A P T E R
27
27-1