Cisco 2950 - Catalyst Switch Configuration Manual page 9

Configuring Switch-Based Authentication
9
C H A P T E R
78-11380-10
Managing the MAC Address Table
Building the Address Table
MAC Addresses and VLANs
Default MAC Address Table Configuration
Changing the Address Aging Time
Removing Dynamic Address Entries
Configuring MAC Address Notification Traps
Adding and Removing Static Address Entries
Configuring Unicast MAC Address Filtering
Displaying Address Table Entries
Managing the ARP Table
Preventing Unauthorized Access to Your Switch
Protecting Access to Privileged EXEC Commands
Default Password and Privilege Level Configuration
Setting or Changing a Static Enable Password
Protecting Enable and Enable Secret Passwords with Encryption
Disabling Password Recovery
Setting a Telnet Password for a Terminal Line
Configuring Username and Password Pairs
Configuring Multiple Privilege Levels
Setting the Privilege Level for a Command
Changing the Default Privilege Level for Lines
Logging into and Exiting a Privilege Level
Controlling Switch Access with TACACS+
Understanding TACACS+
TACACS+ Operation
Configuring TACACS+
Default TACACS+ Configuration
Identifying the TACACS+ Server Host and Setting the Authentication Key
Configuring TACACS+ Login Authentication
Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services
Starting TACACS+ Accounting
Displaying the TACACS+ Configuration
Controlling Switch Access with RADIUS
Understanding RADIUS
RADIUS Operation
9-19
8-21
8-22
8-22
8-23
8-23
8-24
8-24
8-26
8-27
8-28
8-28
9-1
9-1
9-2
9-3
9-5
9-6
9-7
9-8
9-8
9-10
9-10
9-10
9-12
9-12
9-13
9-17
9-17
9-18
9-18
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
9-2
9-4
9-9
9-14
Contents
9-13
9-16
ix