Cisco WS-C2960S-24PD-L Software Guide - Page 195

Chapter 6 Configuring the System Controlling Switch Access with RADIUS Beginning in privileged EXEC mode, follow these steps to configure the switch to recognize and use VSAs: Step 1 Step 2 Step 3 Step 4 Step 5 Command Purpose configure terminal Enter global configuration mode. radius-server vsa send [accounting | Enable the switch to recognize and use VSAs as defined by RADIUS IETF authentication] attribute 26. • (Optional) Use the accounting keyword to limit the set of recognized vendor-specific attributes to only accounting attributes. • (Optional) Use the authentication keyword to limit the set of recognized vendor-specific attributes to only authentication attributes. If you enter this command without keywords, both accounting and authentication vendor-specific attributes are used. end Return to privileged EXEC mode. show running-config Verify your settings. copy running-config startup-config (Optional) Save your entries in the configuration file. For a complete list of RADIUS attributes or more information about vendor-specific attribute 26, refer to the "RADIUS Attributes" appendix in the Cisco IOS Security Configuration Guide for Release 12.0. Configuring the Switch for Vendor-Proprietary RADIUS Server Communication Although an IETF draft standard for RADIUS specifies a method for communicating vendor-proprietary information between the switch and the RADIUS server, some vendors have extended the RADIUS attribute set in a unique way. Cisco IOS software supports a subset of vendor-proprietary RADIUS attributes. As mentioned earlier, to configure RADIUS (whether vendor-proprietary or IETF draft-compliant), you must specify the host running the RADIUS server daemon and the secret text string it shares with the switch. You specify the RADIUS host and secret text string by using the radius-server global configuration commands. 78-6511-08 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 6-67