ELTEX MES3108 - 5.18 Control functions; 5.18.1 AAA mechanism

MES3000 Ethernet switch series 133
5.18 Control functions
5.18.1 AAA mechanism
To ensure the system security, the switch uses AAA mechanism (Authentication, Authorization,
Accounting).
 Authentication—matching of the existing account in the security system.
 Authorization (access level verification)—matching of the existing account in the system
(passed authentication) and specific privileges.
 Accounting—user resource consumption monitoring.
SSH mechanism is used for data encryption.
Global configuration mode commands
Command line request in global configuration mode appears as follows:
console(config)#
Table 5.143 —Global configuration mode commands
Command
Value/Default value
Action
aaa authentication login
{default | list_name}
method_list
By default, the local
database is used for
checking purposes (aaa
authentication login
default local);
list_name: (1..12)
characters
Define authentication method for log in.
- default—use the following authentication methods
- list_name—name of authentication method being activated
when the user logs in.
Method description (method1 [method2...]):
- enable—use password for authentication
- line—use terminal password for authentication
- local—use local username database for authentication
- none—do not use authentication
- radius—use RADIUS server list for authentication
- tacacs—use TACACS server list for authentication
If authentication method is not defined, the
access to the console will always be successful.
List is created with the command:
aaa authentication login list-name method_list
List utilization:
aaa authentication login list-name
To prevent the loss of access, you should always
define the required minimum of settings for the
specified authentication method.
no aaa authentication login
{default | list_name}
Restore the default value.
aaa authentication mode
{chain | break}
-/chain
Sets the algorithm for polling of authentication methods.
- сhain — if authentication attempt performed with the first
method from the list is unsuccessful, subsequent authentication
attempt will use the next method in the chain.
- break — if authentication attempt performed with the first
method from the list is unsuccessful, authentication process stops.