Re: SSH to Cisco Devices

2012-08-09 Thread Alan DeKok
Michael Schwartzkopff wrote: I know it is possible to use FreeRADIUS to authenticate SSH access to Cisco devices with username/password scheme. Cisco's IOS in version 15 also offers the private/public key authentication scheme. That is not standardized in RADIUS. Is is possible to

RE: SSH to Cisco Devices

2012-08-09 Thread James S. Smith
You definitely can. The Cisco configuration would look like this: ! version 15.0 ! aaa new-model aaa group server radius FreeRadius server 192.168.0.1 auth-port 1812 acct-port 1813 ip radius source-interface Vlan10 aaa authentication login default group FreeRadius local aaa authorization exec