Control router/switches using radius authentication?

[Andy White]

Hello,

We have a few switches and routers and we use local logons with different privileges, is there a way I can centrally do this, I've never used Cisco works before, but it this a tool that can do that?

[Ganesh Hariharan]

Hello,
We haev a few switches and routers and we use local logons with different privileges, is there a way I can centrally do this, I've never used Cisco works before, but it this a tool that can do that?

Hi,

I dont think cisco works used for authentication purpose in order to have authentication of devices you can have TACAS or RADIUS like ACS server insatlled in your network which can be used for AAA purpose fo your devices.

Hope to help !!

Ganesh.H

[Andy White]

Thanks, what to common mode engineers use, we only have a windows IAS Radius server, also can these tools control privileges?

[Leo Laohoo]

Configuring RADIUS and TACACS+ Servers
http://www.cisco.com/en/US/customer/docs/wireless/access_point/12.4_3g_JA/configuration/guide/s43radi.html

[Andy White]

Can these control privileges aswell as authentication?  Also

is TACACS= a piece of Cisco software we haev to buy?

[Ganesh Hariharan]

Thanks, what to common mode engineers use, we only have a windows IAS Radius server, also can these tools control privileges?

Andy,

All depends on the server using the protocol like radius or tacas,If you are using Radius then devices need to communicate on radius protocol with servers for authentication and authorization.

Check out the radius attributes for authorzation purpose in servers with client

http://www.ciscosystems.com/en/US/docs/ios/11_3/security/configuration/guide/scratrib.html#wp307

Hope to Help !!

Ganesh.H

Remember to rate the helpful post

[Andy White]

I've never used TACACS, I guess this is quite costly (can't find pricing)?

Radius is free on Windows server, maybe this is my only option.

[Ganesh Hariharan]

I've never used TACACS, I guess this is quite costly (can't find pricing)?
Radius is free on Windows server, maybe this is my only option.

Hi,

Check out the below link for IAS radius intergartion with cisco devices , along with comparism details for TACAS and RADIUS.

http://www.tech-recipes.com/rx/1478/how-to-setup-ias-to-use-radius-to-authenticate-cisco-device/

http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a0080094e99.shtml

Hope to Help !!

Ganesh.H

Remember to rate the helpful post