TACAS + and RADIUS Authentication [7:33372]
Can TACACS+ or RADIUS be used to authenticase users that are NOT dialing in? (For example can I use either technology to authenticate users telneting directly to a router?). Thanks, Pierre-Alex Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=33372t=33372 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: TACAS + and RADIUS Authentication [7:33372]
Yes!!! offcouse, aaa authenticate login telnetusers tacacs+ ! ! ! Line vty 0 4 login authentication telnetusers ! ! Henceforth anybody that login including users must be aunthenticated by the tacacs+, however you have to be very careful with this command, because if you tacacs+ server become unavailable, you might not be able to login. The best option is to use this instead. aaa authentication login telnetusers tacacs+ enable This ensure that your enable password remains valid for a login into the router even if the tacacs+ server fails. Regards. Oletu - Original Message - From: Pierre-Alex GUANEL To: Sent: Sunday, January 27, 2002 11:43 AM Subject: TACAS + and RADIUS Authentication [7:33372] Can TACACS+ or RADIUS be used to authenticase users that are NOT dialing in? (For example can I use either technology to authenticate users telneting directly to a router?). Thanks, Pierre-Alex _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=33378t=33372 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: TACAS + and RADIUS Authentication [7:33372]
Thank you Also could RADIUS be used to authenticate telnet users or is it restricted to dialup? Pierre-Alex -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Godswill HO Sent: Sunday, January 27, 2002 2:43 PM To: [EMAIL PROTECTED] Subject: Re: TACAS + and RADIUS Authentication [7:33372] Yes!!! offcouse, aaa authenticate login telnetusers tacacs+ ! ! ! Line vty 0 4 login authentication telnetusers ! ! Henceforth anybody that login including users must be aunthenticated by the tacacs+, however you have to be very careful with this command, because if you tacacs+ server become unavailable, you might not be able to login. The best option is to use this instead. aaa authentication login telnetusers tacacs+ enable This ensure that your enable password remains valid for a login into the router even if the tacacs+ server fails. Regards. Oletu - Original Message - From: Pierre-Alex GUANEL To: Sent: Sunday, January 27, 2002 11:43 AM Subject: TACAS + and RADIUS Authentication [7:33372] Can TACACS+ or RADIUS be used to authenticase users that are NOT dialing in? (For example can I use either technology to authenticate users telneting directly to a router?). Thanks, Pierre-Alex _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=33386t=33372 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: TACAS + and RADIUS Authentication [7:33372]
You can also use Radius - aaa authentication login default group radius local Which just means that the router will check radius first, then try it's local dbase of users... Chris Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=33400t=33372 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
