xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
65
4-7 config authen_login
Description
This command is used to configure a user-defined or default method list of authentication methods for
user login. The sequence of methods will affect the authentication result. For example, if the sequence
is TACACS+ first, then TACACS and local, when a user trys to login, the authentication request will be
sent to the first server host in the TACACS+ built-in server group. If the first server host in the
TACACS+ group is missing, the authentication request will be sent to the second server host in the
TACACS+ group, and so on. If all server hosts in the TACACS+ group are missing, the authentication
request will be sent to the first server host in the TACACS group. If all server hosts in a TACACS
group are missing, the local account database in the device is used to authenticate this user. When a
user logs in to the device successfully while using methods like
TACACS/XTACACS/TACACS+/RADIUS built-in or user-defined server groups or none, the “user”
privilege level is assigned only. If a user wants to get admin privilege level, the user must use the
“enable admin” command to promote his privilege level. But when the local method is used, the
privilege level will depend on this account privilege level stored in the local device.
Format
config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs |
tacacs+ | radius | server_group <string 15> | local | none}(1)
Parameters
default – Specify the default method list of authentication methods.
method_list_name - Specify the user-defined method list of authentication methods.
<string 15> - Specify the user-defined method list of authentication methods. The method list
name can be up to 15 characters long.
method - Choose the desired authentication method:
tacacs - Specify authentication by the built-in server group TACACS.
xtacacs - Specify authentication by the built-in server group XTACACS.
tacacs+ - Specify authentication by the built-in server group TACACS+.
radius - Specify authentication by the built-in server group RADIUS.
server_group - Specify authentication by the user-defined server group.
<string 15> - Specify authentication by the user-defined server group. The server group value
can be up to 15 characters long.
local - Specify authentication by local user account database in the device.
none - Specify no authentication.
Restrictions
Only Administrator-level users can issue this command.
Example
To configure a user-defined method list for user login:
To Next Page
Loading...
Need help?
General