Cisco WS-C2980G-A Software Guide - Page 445

30 C H A P T E R Configuring Switch Access Using AAA This chapter describes how to configure authentication, authorization, and accounting (AAA) to monitor and control access to the command-line interface (CLI) on the Catalyst enterprise LAN switches. Note For complete syntax and usage information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. Note For information on configuring 802.1x authentication to restrict unauthorized devices from connecting to a LAN through publicly accessible ports, see Chapter 31, "Configuring 802.1x Authentication." Note For information on configuring ports to allow or restrict traffic based on host MAC addresses, see Chapter 16, "Configuring Port Security." This chapter consists of these sections: • Understanding How Authentication Works, page 30-1 • Configuring Authentication, page 30-8 • Authentication Example, page 30-40 • Understanding How Authorization Works, page 30-41 • Configuring Authorization, page 30-43 • Authorization Example, page 30-46 • Understanding How Accounting Works, page 30-47 • Configuring Accounting, page 30-50 • Accounting Example, page 30-53 Understanding How Authentication Works You can configure any combination of these authentication methods to control access to the switch: • Login authentication • Local authentication 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-1