Installation guide

Authentication Commands
4-95
4
Authentication Commands
You can configure this switch to authenticate users logging into the system for
management access using local or RADIUS authentication methods. You can also
enable port-based authentication for network client access using IEEE 802.1X.
User Account Commands
The basic commands required for management access are listed in this section.
This switch also includes other options for password checking via the console or a
Telnet connection (page 4-40), user authentication via a remote authentication
server (page 4-95), and host access authentication for specific ports (page 4-131).
Table 4-27 show snmp user - display description
Field Description
EngineId String identifying the engine ID.
User Name Name of user connecting to the SNMP agent.
Authentication Protocol The authentication protocol used with SNMPv3.
Privacy Protocol The privacy protocol used with SNMPv3.
Storage Type The storage type for this entry.
Row Status The row status of this entry.
SNMP remote user A user associated with an SNMP engine on a remote device.
Table 4-28 Authentication Commands
Command Group Function Page
User Accounts Configures the basic user names and passwords for management
access
4-95
Authentication Sequence Defines logon authentication method and precedence 4-98
RADIUS Client Configures settings for authentication via a RADIUS server 4-100
TACACS+ Client Configures settings for authentication via a TACACS+ server 4-104
AAA Configures authentication, authorization, and accounting for
network access
4-109
Web Server Enables management access via a web browser 4-118
Telnet Server Enables management access via Telnet 4-121
Secure Shell Provides secure replacement for Telnet 4-122
Port Authentication Configures host authentication on specific ports using 802.1X 4-131
Management IP Filter Configures IP addresses that are allowed management access 4-140
Table 4-29 User Access Commands
Command Function Mode Page
username Establishes a user name-based authentication system at login GC 4-96
enable password Sets a password to control access to the Privileged Exec level GC 4-97