ZyXEL Communications UAG Series - Chapter 42 Authentication Objects; 42.1 Authentication Objects Overview; 42.2 aaa authentication Commands

UAG CLI Reference Guide 221
CHAPTER 42
Authentication Objects
This chapter shows you how to select different authentication methods for user authentication using
the AAA servers or the internal user database.
42.1 Authentication Objects Overview
After you have created the AAA server objects, you can specify the authentication objects
(containing the AAA server information) that the UAG uses to authenticate users (using VPN or
managing through HTTP/HTTPS).
42.2 aaa authentication Commands
The following table lists the aaa authentication commands you use to configure an
authentication profile.
Table 136 aaa authentication Commands
COMMAND DESCRIPTION
aaa authentication rename
profile-name-old profile-name-
new
Changes the profile name.
profile-name: You may use 1-31 alphanumeric characters, underscores(
_), or
dashes (-), but the first character cannot be a number. This value is case-sensitive.
clear aaa authentication
profile-name
Deletes all authentication profiles or the specified authentication profile.
Note: You can NOT delete a profile that is currently in use.
show aaa authentication {group-
name|default}
Displays the specified authentication server profile settings.
[no] aaa authentication
profile-name
Sets a descriptive name for the authentication profile. The
no command deletes a
profile.
[no] aaa authentication default
member1 [member2] [member3]
[member4]
Sets the default profile to use the authentication method(s) in the order specified.
member = group ad, group ldap, group radius, or local.
Note: You must specify at least one member for each profile. Each type of member
can only be used once in a profile.
The no command clears the specified authentication method(s) for the profile.