D-Link DGS-1210/ME series - Config Authen_Login

DGS-1210/ME Metro Ethernet Switch CLI Reference Guide
437
DGS-1210-28MP/ME:5# create authen_login method_list_name Trinity
Command: create authen_login method_list_name Trinity
Success.
DGS-1210-28MP/ME:5#
config authen_login
Purpose
To configure a user-defined or default method list of authentication
methods for user login.
Syntax
config authen_login [default | method_list_name <string 15>]
method [tacacs+ | radius | local | server_group <string 15> |
none]
Description
The config authen_login command configures a user-defined or
default method list of authentication methods for users logging on to
the Switch. The sequence of methods implemented in this command
affects the authentication result. For example, if a user enters a
sequence of methods like tacacs – local, the Switch sends an
authentication request to the first tacacs host in the server group. If
no response comes from the server host, the Switch sends an
authentication request to the second tacacs host in the server group
and so on, until the list is exhausted. When the local method is used,
the privilege level is dependant on the local account privilege
configured on the Switch.
Successful login using any of these methods gives the user a ‘user’
priviledge only. If the user wishes to upgrade his or her status to the
administrator level, the user must implement the enable admin
command, followed by a previously configured password. (See the
enable admin part of this section for more detailed information,
concerning the enable admin command.)
Parameters
default – The default method list for access authentication, as
defined by the user. The user may choose one or more of the
following authentication methods:
 tacacs+ – Specifies that the user is to be authenticated
using the TACACS+ protocol from the remote TACACS+
server hosts of the TACACS+ server group list.
 radius - Specifies that the user is to be authenticated using
the RADIUS protocol from the remote RADIUS server hosts
of the RADIUS server group list.
 local - Specifies that the user is to be authenticated using
the local user account database on the Switch.
 server_group <string 15> –Specifies that the user is to be
authenticated using the server group account database on
the Switch.
 none – Specifies that no authentication is required to
access the Switch.
method_list_name <string 15> – Specifies a previously created
method list name defined by the user. One or more of the following
authentication methods may be added to this method list:
 tacacs+ – Specifies that the user is to be authenticated