AMX NXA-ENET24 manual Authentication Commands, Command Function Authentication login Syntax

CLI (Command Line Interface)

Authentication Commands

You can configure this switch to authenticate users logging into the system for management access using local or RADIUS authentication methods. You can also enable port-based authentication for network client access using IEEE 802.1x.

Authentication Commands

Command	Function
authentication login	Syntax:
This command defines the	authentication login {[local] [radius] [tacacs]}
login authentication method	no authentication login
	• local - Use local password.
and precedence.
	• radius - Use RADIUS server password.
Use the no form to restore
	• tacacs - Use TACACS server password.
the default.
	Default Setting: Local
	Command Mode: Global Configuration
	Command Usage: RADIUS uses UDP while TACACS+ uses TCP. UDP only
	offers best effort delivery, while TCP offers a connection-oriented transport.
	Also, note that RADIUS encrypts only the password in the access-request
	packet from the client to the server, while TACACS+ encrypts the entire body of
	the packet.
	RADIUS and TACACS+ logon authentication assigns a specific privilege level
	for each user name and password pair. The user name, password, and
	privilege level must be configured on the authentication server.
	You can specify three authentication methods in a single command to indicate
	the authentication sequence. For example, if you enter “authentication login
	radius tacacs local,” the user name and password on the RADIUS server is
	verified first. If the RADIUS server is not available, then authentication is
	attempted on the TACACS+ server. If the TACACS+ server is not available, the
	local user name and password is checked.
	Example:
	Console(config)#authentication login radius
	Console(config)#
authentication enable	Syntax:
This command defines the	authentication enable {[local] [radius] [tacacs]}
authentication method and	no authentication enable
	• local - Use local password only.
precedence to use when
	• radius - Use RADIUS server password only.
changing from Exec
command mode to Privileged	• tacacs - Use TACACS server password.
Exec command mode with	Default Setting: Local
the enable command (see
	Command Mode: Global Configuration
page 169).
	Command Usage: RADIUS uses UDP while TACACS+ uses TCP. UDP only
Use the no form to restore
	offers best effort delivery, while TCP offers a connection-oriented transport.
the default.
	Also, note that RADIUS encrypts only the password in the access-request
	packet from the client to the server, while TACACS+ encrypts the entire body of
	the packet.
	RADIUS and TACACS+ logon authentication assigns a specific privilege level
	for each user name and password pair. The user name, password, and
	privilege level must be configured on the authentication server.
	You can specify three authentication methods in a single command to indicate
	the authentication sequence. For example, if you enter “authentication enable
	radius tacacs local,” the user name and password on the RADIUS server is
	verified first. If the RADIUS server is not available, then authentication is
	attempted on the TACACS+ server. If the TACACS+ server is not available, the
	local user name and password is checked.
	Example:
	Console(config)#authentication enable radius
	Console(config)#

NXA-ENET24 - Software Management Guide 199