topic Re: Multiple authentication methods on SSH access in Network Access Control

Multiple authentication methods on SSH access

laut — Sun, 10 Mar 2019 23:42:21 GMT

After the implementation of ACS, all the network switch authentication is under ACS with local as backup. Is that any solution to separate the authentication methods (Local & TACACS+) of SSH access to the switch (line vty 0 3 = TACACS+, line vty 4 = Local)? Same as router SSH reverse telnet, but "ip ssh port" is not supported on the switch.

Re: Multiple authentication methods on SSH access

Collin Clark — Fri, 25 Sep 2009 12:57:11 GMT

You can configure lines 0-3 for TACACS

line vty 0 3

and vty line 4 for local

line vty 4

Re: Multiple authentication methods on SSH access

Jatin Katyal — Fri, 25 Sep 2009 15:00:50 GMT

Hi,

!---This can be possible by configuring !---method list on the device.

tacacs-server host key

aaa authentication login list group tacacs+ local

line vty 0 3

line vty 4

List=name of the method list.

HTH

Regards,

Re: Multiple authentication methods on SSH access

laut — Mon, 28 Sep 2009 00:27:02 GMT

Hi,

I've tried this before, but the ssh connection should go through one by one. line vty 0 -> 1 -> 2 -> 3 -> 4. If no one make the ssh connection before, the connection should on line vty 0. How to make the ssh conenction to specific line vty for particular authentication method? As mentioned before, the router can provide the solution to assiocate the line vty to rotary with different ssh listening ports. As similar solution or other approach for the switch to provide the same kind of services.

Thanks.

Re: Multiple authentication methods on SSH access

Collin Clark — Mon, 28 Sep 2009 12:36:37 GMT

AFAIK there is no way to do it.