Manualshelf

System information

ManualsBrandsCisco ManualsComputer equipmentSLM2008 - Small Business Smart Switch
171172173174175176177178179180
Configuring Security
Configuring Management Access Authentication
Cisco Small Business 200 Series Smart Switch Administration Guide 167
16
• Authentication Port—Enter the UDP port number of the RADUS server for
authentication requests.
• Accounting Port—Enter the UDP port number of the RADUS server for
accounting requests.
• Number of Retries—Enter the number of requests that are sent to the
RADIUS server before a failure is considered to have occurred. Select Use
Default to use the default value for the number of retries.
• Dead Time—Enter the number of minutes that must pass before a non-
responsive RADIUS server is bypassed for service requests. Select Use
Default to use the default value for the dead time. If you enter 0 minutes,
there is no dead time.
• Usage Type—Enter the RADIUS server authentication type. The options are:
- Login—RADIUS server is used for authenticating users that want to
administer the switch.
- 802.1X—RADIUS server is used for authentication in 802.1x Access
Control.
- All—RADIUS server is used for authenticating user that wants to
administer the switch and for authentication in 802.1X Access Control.
STEP 4 Click Apply. The RADIUS server is added, and the switch is updated.
Configuring Management Access Authentication
Authentication methods can be assigned to HTTP sessions. This authentication
can be performed locally or on an external RADIUS server.
User authentication occurs in the order that the authentication methods are
selected. If the first authentication method is not available, the next selected
method is used. For example, if the selected authentication methods are RADIUS
and Local, and all configured RADIUS servers are queried in priority order and do
not reply, the user is authenticated locally.
If an authentication method fails or the user has insufficient privilege level, the user
is denied access to the switch. In other words, if authentication fails at an
authentication method, the switch stops; it does not continue and does not attempt
to use the next authentication method.