Access Security Guide K/KA/KB.15.15

Configuring RADIUS accounting........................................................................................157
Configuring a switch to access a RADIUS server..............................................................158
Reconfiguring the Acct-Session-ID operation (Optional) ....................................................159
Configure accounting types and controls for sending reports to the RADIUS server...............159
Accounting service types to track..............................................................................160
Accounting Controls................................................................................................161
Configuring session blocking and interim updating options (Optional)................................162
Configuring commands authorization on a RADIUS server.....................................................163
Using Vendor Specific Attributes (VSAs)..........................................................................163
Configuring the RADIUS VSAs...........................................................................................164
Enhanced commands.......................................................................................................165
Viewing...............................................................................................................................167
Viewing RADIUS server group information...........................................................................167
Viewing and changing the SNMP access configuration.........................................................168
Viewing authorization information......................................................................................169
Viewing RADIUS Statistics.................................................................................................170
Viewing RADIUS authentication statistics.............................................................................171
Viewing port-access information.........................................................................................172
Viewing RADIUS accounting statistics.................................................................................173
Using..................................................................................................................................174
Using multiple RADIUS server groups..................................................................................174
Adding and deleting servers to the RADIUS configuration.....................................................174
Setting accounting type, and how data is sent ....................................................................174
Allowing reauthentication when RADIUS server is unavailable................................................174
Setting the time period to allow cached reauthentication ......................................................175
Enabling authorization to control access to CLI commands.....................................................175
Creating Local Privilege Levels...........................................................................................176
Configuring Groups for Local Authorization....................................................................176
Configuring a local user for a group..............................................................................178
Displaying Command Authorization Information..............................................................178
Changing RADIUS-server access order...............................................................................179
Using SNMP to view and configure switch authentication features..........................................180
Cached reauthentication...................................................................................................181
Timing considerations..................................................................................................181
Determining the maximum amount of time before client session termination....................182
Local authentication process..............................................................................................182
Controlling WebAgent access...........................................................................................183
Commands authorization..................................................................................................183
VLAN assignment in an authentication session.....................................................................183
Tagged and untagged VLAN attributes...............................................................................184
Additional RADIUS attributes.............................................................................................184
Accounting services..........................................................................................................185
Accounting service types..............................................................................................185
Acct-Session-ID options in a management session.................................................................187
Unique Acct-Session-ID operation..................................................................................187
Common Acct-Session-ID operation................................................................................188
Dynamic removal of authentication limits.............................................................................189
Overview...................................................................................................................189
Overview............................................................................................................................189
Accounting services..........................................................................................................190
Accounting Service Types.............................................................................................190
Networks accounting..............................................................................................190
Executive accounting...............................................................................................191
System accounting..................................................................................................191
Commands accounting...........................................................................................191
Contents 9