Configuring Authentication Authentication provides a method to identify users, which includes the login and password dialog, challenge and response, messaging support, and encryption, depending on the selected security protocol. Authentication is the way a user is identified prior to being allowed access to the network and network services.
Prerequisites for Configuring Authentication, on page 1 Restrictions for Configuring Authentication, on page 1 Information About Authentication, on page 2 How to Configure Authentication, on page 17 Configuration Examples for Authentication, on page 34 Feature History for Configuring Authentication, on page 47 Prerequisites for Configuring Authentication The implementation of authentication is divided into Authentication, Authorization, and Accounting (AAA) authentication and nonauthentication methods. Cisco recommends that, whenever possible, AAA security services be used to implement authentication.
Restrictions for Configuring Authentication • The number of AAA method lists that can be configured is 250. • If you configure the same RADIUS server IP address for a different UDP destination port for accounting requests by using the acct-port keyword and a UDP destination port for authentication requests by using the auth-port keyword with and without the nonstandard option, the RADIUS server does not accept the nonstandard option. • The aaa accounting delay-start command is not supported for binOS use cases like dot1x authentication. Configuring Authentication 1