41-1
Chapter 41: User Authentication Commands
You can configure this switch to authenticate users logging into the system for
management access using local or remote authentication methods.

User Account Commands

The basic commands required for management access ar e listed in this section.
This switch also includes other options for password checking via the console or a
Telnet connection (page36-1), user authe ntication via a remote authentication
server (page 41-3), and host access authentication for specific ports (page 43-1).

username

This command adds named users, requires authentication at login, specifies or
changes a user's password (or specify that no password is required), or spec ifies or
changes a user's access level. Use the no form to remove a user name.
Syntax
username name {access-level level | nopassword |
password {0|7}passwor d}
no username name
•name - The name of the user.
(Maximum length: 8 characters, case sensitive. Maximum users: 16)
Table41-1 Authentication C ommands
Command Group Function Page
User Accounts Configures the basic user names and passwords for management
access
41-1
Authentication Sequence Defines logon authentication method and precedence 41-3
RADIUS Client Configures settings for authentication via a RADIUS server 41-5
TACACS+ Client Configures settings for authentication via a TACACS+ server 41-9
Web Server Settings Enables management access via a web browser 41-11
Telnet Server Settings Enables management access via Telnet 41-14
Secure Shell Settings Provides sec ure replacement for Telnet 41-15
IP Filter Config ures IP addresses that are allowed management acce ss 41-24
Table41-2 User Access Comm ands
Command Function Mode Page
username Establishes a user name-based authentication system at login GC 41-1
enable password Sets a password to control access to the Privileged Exec level GC 41-2