User's Manual

117
Users Manual of CS-6306R
6.1.5 AAA Authentication Configuration Example
6.1.5.1 RADIUS Authentication Example
This section provides one sample configuration using RADIUS.
The following example shows how to configure the switch to authenticate and authorize using RADIUS:
aaa authentication login radius-login group radius local
aaa authorization network radius-network radius
line vty
login authentication radius-login
The lines in this sample RADIUS authentication and authorization configuration are defined as follows: :
 The aaa authentication login radius-login radius local command configures the router to use RADIUS for
authentication at the login prompt. If RADIUS returns an error, the user is authenticated using the local
database.
 The aaa authentication ppp radius-ppp radius command configures the software to use PPP
authentication using CHAP or PAP if the user has not already logged in. If the EXEC facility has
authenticated the user, PPP authentication is not performed.
 The aaa authorization network radius-network radius command command queries RADIUS for network
authorization, address assignment, and other access lists.
 The login authentication radius-login command enables the radius-login method list for line 3.
6.1.6 AAA Authorization Configuration Task List
 Configuring EXEC Authorization using AAA
6.1.7 AAA Authorization Configuration Task
To configure AAA authorization, perform the following configuration processes:
(1) If you decide to use a separate security server, configure security protocol parameters, such as RADIUS,
TACACS+, or Kerberos.
(2) Define the method lists for authorization by using an AAA authorization command.
(3) Apply the method lists to a particular interface or line, if required.