Chapter 18: Security Configuration Guide
252
DIGITAL GIGAswitch/Router User Reference Manual
Configuring GSR Access Security
This section describes the following methods of controlling access to the GSR:
•
RADIUS
•
TACACS
•
TACACS Plus
•
Passwords
Configuring RADIUS
You can secure login or Enable mode access to the GSR by enabling a Remote
Authentication Dial-In Service (RADIUS) client. A RADIUS server responds to the GSR
RADIUS client to provide authentication.
You can configure up to five RADIUS server targets on the GSR. A timeout is set to tell the
GSR how long to wait for a response from RADIUS servers.
To configure RADIUS security, enter the following commands in Configure mode:
Specify a RADIUS server.
radius set server
<hostname or IP-addr>
Set the RADIUS time to wait for a
RADIUS server reply.
radius set timeout
<number>
Determine the GSR action if no
server responds.
radius set last-resort password|succeed
Enable RADIUS.
radius enable
Cause RADIUS authentication at
user login or when user tries to
access Enable mode.
radius authentication login|enable
Logs specified types of command
to RADIUS server.
radius accounting command level <
level
>
Logs to RADIUS server when
shell is stopped or started on
GSR.
radius accounting shell start|stop|all
Logs to RADIUS server SNMP
changes to startup or active
configuration.
radius accounting snmp active|startup
Logs specified type(s) of
messages to RADIUS server.
radius accounting system
fatal|error|warning|info
