AAA RADIUS authentication on switches

[rolandshum]

I have in the past configured switches to use TACACS+ for security on telnet sessions. Can I use RADIUS for the same thing?

[nhabib]

Yes, you may use RADIUS for the same thing.

There are a number of sample configurations located at:

http://www.cisco.com/en/US/tech/tk59/tech_configuration_examples_list.html

[rolandshum]

Is there a similar link but for a switch running IOS not CatOS?

[sundar.palaniappan]

Hi,

Check out this link:

http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800ca7ab.html#wp1001359

Just want to add, for router management TACACS+ is a better choice than radius. Radius doesn't give you the ability to specify which commands can or cannot be executed in the router by a user.

Hope this helps!

Sundar

[rolandshum]

Thanks Sundar but my mgmt here won't purchase a TACACS+ server.