Access Authentication Control Commands
Extreme Networks EAS 100-24t Switch CLI Manual
261
Example usage:
To view the authentication login method list named Zira:
Description This command is used to show a list of authentication methods for user login.
Parameters default – Entering this parameter will display the default method list for users
logging on to the switch.
method_list_name <string 15> - Enter an alphanumeric string of up to 15
characters to define the given method list to view.
all – Entering this parameter will display all the authentication login methods
currently configured on the switch.
The window will display the following parameters:
Method List Name – The name of a previously configured method list name.
Priority – Defines which order the method list protocols will be queried for
authentication when a user attempts to log on to the switch. Priority ranges
from 1(highest) to 4 (lowest).
Method Name – Defines which security protocols are implemented, per
method list name.
Comment – Defines the type of Method. User-defined Group refers to server
group defined by the user. Built-in Group refers to the TACACS, XTACACS,
TACACS+ and RADIUS security protocols which are permanently set in the
switch. Keyword refers to authentication using a technique INSTEAD of
TACACS / XTACACS / TACACS+ / RADIUS which are local (authentication
through the user account on the switch) and none (no authentication
necessary to access any function on the switch).
Restrictions None.
#show authen_login method_list_name Zira
Command: show authen_login method_list_name Zira
Method List Name Priority Method Name Comment
---------------- --------- --------------- ---------
Zira 1 tacacs+ Built-in Group
2 tacacs Built-in Group
3 dbrown User-defined Group
4 local Keyword
#
create authen_enable method_list_name
Purpose Used to create a user-defined method list of authentication methods for
promoting normal user level privileges to Administrator level privileges on the
switch.
Syntax create authen_enable method_list_name <string 15>
Description This command is used to promote users with normal level privileges to
Administrator level privileges using authentication methods on the switch.
Once a user acquires normal user level privileges on the switch, he or she
must be authenticated by a method on the switch to gain administrator
privileges on the switch, which is defined by the Administrator. A maximum of
eight enable method lists can be implemented on the switch.
show authen_login