Table of Contents
Advertisement
Chapter 27
Configuring Switch Access Using AAA
Enabling Kerberos
To enable Kerberos authentication, perform this task in privileged mode:
Task
Step 1
Specify Kerberos as the authentication method.
Step 2
Verify the configuration.
This example shows how to enable Kerberos as the login authentication method for Telnet and verify the
configuration:
Console> (enable) set authentication login kerberos enable telnet
kerberos login authentication set to enable for telnet session.
Console> (enable) show authentication
Login Authentication: Console Session
---------------------
tacacs
radius
kerberos
local
Enable Authentication:Console Session
---------------------- ----------------- ----------------
tacacs
radius
kerberos
local
Console> (enable)
This example shows how to enable Kerberos as the login authentication method for the console and
verify the configuration:
Console> (enable) set authentication login kerberos enable console
kerberos login authentication set to enable for console session.
Console> (enable) show authentication
Login Authentication: Console Session
---------------------
tacacs
radius
kerberos
local
Enable Authentication:Console Session
---------------------- ----------------- ----------------
tacacs
radius
kerberos
local
Console> (enable)
Defining the Kerberos Local-Realm
The Kerberos realm is a domain consisting of users, hosts, and network services that are registered to a
Kerberos server. To authenticate a user defined in the Kerberos database, the switch must know the host
name or IP address of the host running the KDC and the name of the Kerberos realm.
78-12647-02
----------------
disabled
disabled
disabled
enabled(primary)
disabled
disabled
disabled
enabled(primary)
----------------
disabled
disabled
enabled(primary)
enabled
disabled
disabled
enabled(primary)
enabled
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
Command
set authentication login kerberos enable [all |
console | http | telnet] [primary]
show authentication
Telnet Session
----------------
disabled
disabled
enabled(primary)
enabled
Telnet Session
disabled
disabled
enabled(primary)
enabled
Telnet Session
----------------
disabled
disabled
enabled(primary)
enabled
Telnet Session
disabled
disabled
enabled(primary)
enabled
Configuring Authentication
27-31
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
