xStack DGS-3400 Series Layer 2 Gigabit Managed Switch CLI Manual
Example usage:
To view the authentication login method list named Trinity:
DGS-3400:4#show authen_login method_list_name Trinity
Command: show authen_login method_list_name Trinity
Method List Name Priority Method Name Comment
2 tacacs Built-in Group
---------------- -------- --------------- ---------
Trinity 1 tacacs+ Built-in Group
3 Darren User-defined Group
4 local Keyword
DGS-3400:4#
create authen_enable method_list_name
Purpose Used to create a user-defined method list of authentication methods
for promoting normal user level privileges to Administrator level
privileges on the Switch.
create authen_enable method_list_name <string 15>
Description This command is used to promote users with normal level privileges
to Administrator level privileges using authentication methods on
the Switch. Once a user acquires normal user level privileges on
the Switch, he or she must be authenticated by a method on the
Switch to gain administrator privileges on the Switch, which is
defined by the Administrator. A maximum of eight (8) enable
method lists can be implemented on the Switch.
Parameters <string 15> - Enter an alphanumeric string of up to 15 characters to
define the given enable method list the user wishes to create.
Restrictions Only administrator-level users can issue this command.
Syntax
Example usage:
To create a user-defined method list, named “Permit” for promoting user privileges to Adminstrator privileges:
DGS-3400:4#create authen_enable method_list_name Permit
Command: show authen_login method_list_name Permit
Success.
DGS-3400:4#
config authen_enable
Purpose Used to configure a user-defined method list of authentication methods for promoting normal
user level privileges to Administrator level privileges on the Switch.
Syntax
config authen_enable [default | method_list_name <string 15>] method {tacacs |
xtacacs | tacacs+ | radius | server_group <string 15> | local_enable | none}
Description This command is used to promote users with normal level privileges to Administrator level
privileges using authentication methods on the Switch. Once a user acquires normal user
level privileges on the Switch, he or she must be authenticated by a method on the Switch to
gain administrator privileges on the Switch, which is defined by the Administrator. A
maximum of eight (8) enable method lists can be implemented simultaneously on the Switch.
The sequence of methods implemented in this command will affect the authentication result.
For example, if a user enters a sequence of methods like tacacs – xtacacs – local_enable,
the Switch will send an authentication request to the first TACACS host in the server group.
198
To Next Page
Loading...
