Configuration Guide Configuring AAA
Optional.
By default, a user is locked for 15 minutes after entering wrong passwords three times.
Enabling Local Account (username or subs) Sharing in Web and iPortal Authentication
(Optional) This configuration is supported only on EG products. This function is supported by default on other types of
Ruijie products.
By default, a local account cannot be shared among multiple STAs.
Verification
Run the show aaa method-list command to display the configured method lists.
Run the show aaa lockout command to display the settings of the maximum number of login attempts and the
maximum lockout time after a login failure.
Run the show running-config command to display the authentication method lists associated with login authentication
and 802.1X authentication.
Related Commands
Enabling AAA
Global configuration mode
To enable the AAA services, run this command. None of the rest of AAA commands can be effective if AAA
is not enabled.
Defining a Method List of Login Authentication
aaa authentication login { default | list-name } method1 [ method2...]
default: With this parameter used, the configured method list will be defaulted.
list-name: Indicates the name of a login authentication method list in characters.
method: Indicates authentication methods from local, none, group, and subs. A method list contains up to
four methods.
local: Indicates that the local user database is used for authentication.
none: Indicates that authentication is not performed.
group: Indicates that a server group is used for authentication. Currently, the RADIUS and TACACS+
server groups are supported.
subs: Indicates that the subs database is used for authentication.
Global configuration mode
If the AAA login authentication service is enabled on the NAS, users must perform login authentication
To Next Page
Loading...
Need help?
General
