Cisco Catalyst 6880-X Specifications download pdf (Page 30)

Access Layer April 2014

TACACS+ is the primary protocol used to authenticate management logins on the infrastructure devices to

the AAA server. A local AAA user database is also defined on each network infrastructure device to provide a

fallback authentication source in case the centralized TACACS+ server is unavailable.

tacacs server TACACS-SERVER-1

address ipv4 10.4.48.15

key [secret key]

aaa group server tacacs+ TACACS-SERVERS

server name TACACS-SERVER-1

aaa authentication login default group TACACS-SERVERS local

aaa authorization exec default group TACACS-SERVERS local

aaa authorization console

ip http authentication aaa

Step 12: Configure a synchronized clock by programming network devices to synchronize to a local NTP server

in the network. The local NTP server typically references a more accurate clock feed from an outside source.

Configure console messages, logs, and debug output to provide time stamps on output, which allows cross-

referencing of events in a network.

ntp server 10.4.48.17

ntp update-calendar

clock timezone PST -8

clock summer-time PDT recurring

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

The ntp update-calendar command configures the switch to update the hardware clock from the ntp time

source periodically. Since not all switches have a hardware clock, this command is not supported by all devices.

Procedure 3 Configure access switch global settings

The access layer devices use VLANs to separate traffic from different devices into the following logical networks:

• The data VLAN provides access to the network for all attached devices other than IP phones.

• The voice VLAN provides access to the network for IP phones.

Both the data and the voice VLAN are configured on all user-facing interfaces.

• The management VLAN provides in-band access to the network for the switches management interface.

The management VLAN is not configured on any user-facing interface and the VLAN interface of the

switch is the only member.

1 2 ... 25 26 27 28 29 30 31 32 33 34 35 ... 110 111

No comments

Cisco Catalyst 6880-X Specifications Page 30