Defining Management Access Method - Cisco 500 series Administration Manual

Configuring Security

Defining Management Access Method

STEP 1
STEP 2
STEP 3
STEP 4
Defining Management Access Method
Cisco 500 Series Stackable Managed Switch Administration Guide
If an authentication method fails or the user has insufficient privilege level, the user
is denied access to the switch. In other words, if authentication fails at an
authentication method, the switch stops the authentication attempt; it does not
continue and does not attempt to use the next authentication method.
To define authentication methods for an access method:
Click Security > Management Access Authentication. The Management Access
Authentication page is displayed.
Select an access method from the Application list.
Use the arrows to move the authentication method between the Optional Methods
column and the Selected Methods column. The first method selected is the first
method that is used.
• RADIUS—User is authenticated on a RADIUS server. You must have
configured one or more RADIUS servers.
• TACACS+—User authenticated on the TACACS+ server. You must have
configured one or more TACACS+ servers.
• None—User is allowed to access the switch without authentication.
• Local—Username and password are checked against the data stored on the
local switch. These username and password pairs are defined in the User
Accounts page.
The Local or None authentication method must always be
NOTE
selected last. All authentication methods selected after Local or None
are ignored.
Click Apply. The selected authentication methods are associated with the access
method.
Access profiles determine how to authenticate and authorize users accessing the
switch through various access methods. Access Profiles can limit management
access from specific sources.
Only users who pass both the active access profile and the management access
authentication methods are given management access to the switch.
18
309