Chapter 27
Configuring Switch Access Using AAA
radius
local
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Radius Deadtime:
Radius Key:
Radius Retransmit:
Radius Timeout:
Radius-Server
----------------------------- -------
172.20.52.3
Console> (enable)
Disabling RADIUS Authentication
If you disable RADIUS authentication with both TACACS+ and local authentication disabled, local
authentication is reenabled automatically.
To disable RADIUS authentication, perform this task in privileged mode:
Task
Step 1
Disable RADIUS authentication for login mode.
Step 2
Disable RADIUS authentication for enable mode. set authentication enable radius disable [all |
Step 3
Verify the RADIUS configuration.
This example shows how to disable RADIUS authentication:
Console> (enable) set authentication login radius disable
radius login authentication set to disable for console and telnet session.
Console> (enable) set authentication enable radius disable
radius enable authentication set to disable for console and telnet session.
Console> (enable) show authentication
Login Authentication:
---------------------
tacacs
radius
local
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
local
Console> (enable)
78-12647-02
disabled
enabled(primary)
disabled
disabled
enabled(primary)
Console Session
----------------
disabled
disabled
enabled(primary)
disabled
disabled
enabled(primary)
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
disabled
enabled(primary)
Telnet Session
disabled
disabled
enabled(primary)
0 minutes
2
5 seconds
Status
Auth-port
------------
primary
1812
Command
set authentication login radius disable [all |
console | http | telnet]
console | http | telnet]
show radius
show authentication
Telnet Session
----------------
disabled
disabled
enabled(primary)
Telnet Session
disabled
disabled
enabled(primary)
Configuring Authentication
27-29