PDF(59.0 KB) View with Adobe Reader on a variety of devices
ePub(100.4 KB) View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
Mobi (Kindle)(145.9 KB) View on Kindle device or Kindle app on multiple devices
Updated:December 13, 2018
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Management Access Authentication Setup on Sx500 Series Stackable Switches
Authentication method helps the network administrators to allow or deny the access of the device through various methods like SSH, Telnet, HTTP etc. RADIUS, TACACS+, and Local are the three types of security that can be enabled in the authentication setup function on the SG500x Series. There is also an option for no security to be present on the switch. RADIUS encrypts just the password in the access-request packet that is transferred from the client to the server. TACACS+ encrypts the whole body of the packet. However, it leaves a standard TACACS+ header. Local just verifies user information that is stored on the switch. User authentication occurs in the order that the authentication methods are selected. If the first authentication method is not available, the next selected method is used. If an authentication method fails or the user has insufficient privilege level, the user is denied access to the switch.
This article explains how to assign authentication methods to access modes like SSH, console, Telnet, HTTP and HTTPS on the SG500x Series Stackable Switches.
• Sx500 Series Stackable Switches
Management Access Authentication Setup
Step 1. Log in to the web configuration utility and choose Security > Management Access Authentication. The Management Access Authentication page opens:
Step 2. Choose the type of application to which you would like to assign authentication from the Application drop-down list.
Step 3. Choose the method of authentication from the Optional Methods list and click the Right Arrow icon to move it to the Selected Methods list.
• RADIUS — Authentication is on a RADIUS server. A RADIUS server must be configured.
• TACACS+ — Authentication is on a TACACS+ server. A TACACS+ server must be configured.
• Local — User information is verified by information stored on the switch.
• None — Authentication is not required to access the switch.
Step 4. (Optional) Choose the method from the Selected Methods and click the Left Arrow icon to remove from the selected methods and move it to Optional Methods.
Step 5. Click Apply to save the authentication settings.