Enable authenpolicy, Disable authenpolicy | D-Link TM DES-6500

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

Command	Parameters
show authen server_host

config authen parameter	<int 1-255>
response_timeout
config authen parameter	<int 1-255>
attempt

show authen parameter

enable admin

config admin local_enable	<password 15>

Each command is listed, in detail, in the following sections.

enable authen_policy

Purpose	Used to enable system access authentication policy.
Syntax	enable authen_policy
Description	This command will enable an administrator-defined authentication
	policy for users trying to access the Switch. When enabled, the
	device will check the method list and choose a technique for user
	authentication upon login.
Parameters	None.
Restrictions	Only administrator-level users can issue this command.

Example usage:

To enable the system access authentication policy:

DES-6500:4#enable authen_policy

Command: enable authen_policy

Success.

DES-6500:4#

disable authen_policy

Purpose	Used to disable system access authentication policy.
Syntax	disable authen_policy
Description	This command will disable the administrator-defined authentication
	policy for users trying to access the Switch. When disabled, the
	Switch will access the local user account database for username and
	password verification. In addition, the Switch will now accept the local
	enable password as the authentication for normal users attempting to
	access administrator level privileges.
Parameters	None.
Restrictions	Only administrator-level users can issue this command.

154

Image 157

D-Link TM DES-6500 manual Enable authenpolicy, Disable authenpolicy

Contents

CLI Manual Table of Contents Page Initial CLI screen Introduction Setting the Switch’s IP Address Assigning an IP Address Connecting to the Switch Using the Console CLI Initial Console Screen Example Command Parameter Help Available Commands Prompt Angle brackets Command SyntaxSquare brackets Vertical bar Reset config Reset config systemBraces Command Parameters Basic Switch Commands Create admin user username Config accountConfig account username Create account Delete account Show accountShow account Delete account username Show config currentconfig configinNVRAM Show config Show session Show session Show switch Show serialport Show serialportShow devicestatus Show devicestatus Enable clipaging Config serialportConfig serialport autologout never 2minutes Enable clipaging Enable telnet Disable clipaging Enable web Disable telnet Disable web Disable webDES-65004#disable web Command disable web Success Save Reset RebootReboot DES-65004#reset config Command reset config Success Config commandprompt LoginLogout Config greetingmessage default Config greetingmessage Success DES-65004# Show greetingmessageShow greetingmessage Config ports Switch Port Commands Learning enabled disabled − Enables or disables the MAC Flowcontrol enabled disabled Enable or disable flow controlShow ports Show ports portlist description Example usage To display port descriptions Config portsecurity ports Port Security Commands Show portsecurity ports portlist Show portsecurity Delete portsecurityentryvlanname vlanname 32 port Delete portsecurityentryvlannamePort macaddress macaddr MD5 DES or SHA DES Network Management Snmp Commands Create snmp user Level will be used Sha − Specifies that the HMAC-SHA-96 authentication Show snmp user Delete snmp userDelete snmp user SNMPname Show snmp user Create snmp viewCreate snmp view viewname 32 oid viewtype included Excluded Show snmp view Delete snmp viewDelete snmp view viewname 32 all oid Show snmp view viewname Create snmp community communitystring 32 view viewname Create snmp communityReadonly readwrite Show snmp community Delete snmp communityDelete snmp community communitystring Show snmp community communitystring Config snmp engineID snmpengineID Config snmp engineIDShow snmp engineID Show snmp engineID Create snmp group groupname 32 v1 v2c Create snmp groupNoauthnopriv authnopriv authpriv readview Viewname Delete snmp group groupname Delete snmp group Show snmp groups Show snmp groups Create snmp host ipaddr v1 v2c v3 noauthnopriv Create snmp hostAuthnopriv authpriv authstring Delete snmp host ipaddr authstring Delete snmp host Create trustedhost Show snmp hostShow snmp host ipaddr Create trustedhost ipaddr Show trustedhost Create trustedhost command aboveDelete trustedhost Show trustedhost Enable snmp authenticatetraps Enable snmp trapsEnable snmp traps Enable snmp authenticatetraps Disable snmp authenticatetraps Disable snmp trapsShow snmp traps Config snmp systemlocation Config snmp systemcontactConfig snmp systemcontact swcontact Config snmp systemlocation swlocation Enable rmon Config snmp systemnameConfig snmp systemname swname Enable rmon DES-65004#enable rmon Command enable rmon Success Disable rmonDisable rmon DES-65004#disable rmon Command disable rmon Success Download Switch Utility CommandsFirmwarefromTFTP ipaddr pathfilename 64 unit Alllinecard cpu unitid 1-8 cfgfromTFTP ipaddr Upload Download configuration Done DES-65004#Done Upload cfgtoTFTP logtoTFTP ipaddr pathfilename Ping Ping ipaddr times value 1-255 timeout secTraceroute Enable autoconfig Enable autoconfig Download configuration Show autoconfig Disable autoconfigDisable autoconfig Show autoconfig Show packet ports Network Monitoring CommandsShow packet ports portlist Show error ports portlist Show error ports Show utilization ports cpu Show utilization Show stackinformation Show stackinformation Topology Clear countersCurrent state Box Count DES-65004# Clear log DES-65004#clear log Command clear log SuccessShow log Clear log Disable syslog Enable syslog Create syslog host Show syslogShow syslog Informational informational messages Create syslog host Config syslog host Config syslog host Config syslog host all severity informational warning all Config syslog host allLocal7 udpport udpportnumber state enabled Facility local0 local1 local2 local3 local4 local5 local6 Informational informational messages Messages to the remote host, specified above, to be enabled State enabled disabled − Allows the sending of syslogDisabled Udpport udpportnumber − Specifies the UDP port number Show syslog host Delete syslog hostDelete syslog host index 1-4 all Show syslog host index Config systemseverity trap log all critical warning Config systemseverityInformation Show systemseverity Show systemseverity Multiple Spanning Tree Protocol Mstp Commands Disable stp Enable stpEnable stp DES-65004#enable stp Command enable stp Success Config stp Config stp version Lbdrecovertimer 0 value 60-1000000 This field will set Config stp ports portlist externalCost auto value Config stp portsTrue false p2p true false auto state enable disable Lbd enable disable Create stp instanceid value Create stp instanceid Config stp instanceid value 1-15 addvlan removevlan Config stp instanceidVidlist Instanceid Config stp priority value 0-61440 instanceid value Config stp priorityDelete stp instanceid Delete stp instanceid value Config stp mstports Config stp mstconfigid Config stp mstports Show stp Max Age Forward DelayShow stp Show stp instanceid Show stp portsShow stp ports portlist Show stp instanceid value Show stp mstconfigid Show stp mstconfigid 4094 DES-65004# Vid list Create fdb Forwarding Database CommandsCreate fdb vlanname 32 macaddr port port Config multicastfdb vlanname 32 macaddr add Config multicastfdbCreate multicastfdb Create multicastfdb vlanname 32 macaddr Delete multicastfdb vlanname 32 macaddr Delete multicastfdb Config fdb agingtime sec Config fdb agingtimeDelete fdb Delete fdb vlanname 32 macaddr Clear fdb DES-65004#clear fdb all Command clear fdb all SuccessClear fdb vlan vlanname 32 port port all Show fdb Show multicastfdb Self Show ipfdbShow ipfdb ipaddr Page Config traffic control Broadcast Storm Control Commands Multicast enabled disabled − Enables or disables multicast Broadcast enabled disabled − Enables or disables broadcast Deciding when incoming packets exceed the Threshold value Config traffic controlrecoverSeconds with the default setting of 5 seconds Config traffic controlrecover portlist all Show traffic control Config traffic controltrap DLF QOS Commands Config bandwidthcontrol portlist all rxrate nolimit Config bandwidthcontrolValue 1-9999 txrate nolimit value Value 1-9999 − Specifies the packet limit, in Mbps, that Show bandwidthcontrolAbove ports will be allowed to transmit Show bandwidthcontrol portlist Config scheduling classid 0-6 maxpacket value Config scheduling Weighted round-robin WRR method of forwarding packets as Config 802.1p userpriority priority 0-7 classid Config 802.1p userpriorityShow scheduling Show scheduling Show 802.1p userpriority Show 802.1p userpriority Show 802.1 defaultpriority Config 802.1p defaultpriorityConfig 802.1p defaultpriority portlist all priority Show 802.1p defaultpriority portlist Config scheduling mechanism strict weightfair Config schedulingmechanism Show schedulingmechanism Show schedulingmechanism Disable holprevention Enable holpreventionEnable holprevention Disable holprevention Show holprevention Show holprevention Config mirror port add Port Mirroring CommandsConfig mirror port port add source ports portlist rx tx Both Config mirror port port delete source port portlist rx tx Config mirror port delete Disable mirror Enable mirror Show mirror Show mirror Create vlan Vlan Commands 119 Encap ethernet llc snap all Specifies that the Switch will DES-65004#delete vlan Command delete vlan Success Config vlan addDelete vlan Delete vlan vlanname Advertisement enabled disabled − Enables or disables Gvrp Config vlan deleteConfig vlan vlanname 32 delete portlist Config gvrp portlist all state enabled disabled Config gvrpIngresschecking enabled disabled acceptableframe Taggedonly admitall pvid vlanid Disable gvrp Enable gvrp Vlan Name Default DES-65004#show vlan Command show vlanShow vlan Show vlan vlanname Show gvrp portlist Show gvrpIngress Checking Acceptable Frame Type Create linkaggregation Link Aggregation CommandsCreate linkaggregation groupid value 1-32 type lacp Config linkaggregation groupid value 1-32 masterport Config linkaggregationPort ports portlist state enabled disabled Delete linkaggregation groupid 129 Config linkaggregation algorithm macsource Config linkaggregation algorithmMacdestination macsourcedest ipsource Ipdestination ipsourcedest Show linkaggregation groupid value 1-32 algorithm Show linkaggregation Config lacpport portlist mode active passive Config lacpport Show lacpport portlist Show lacpport Create ipif IP Commands Including Multiple IP Interfaces PERCreate ipif ipifname 12 networkaddress vlanname Config ipif ipifname 12 ipaddress networkaddress Config ipifVlan vlanname 32 state enabled disabled bootp Dhcp Enable ipif ipifname 12 all Enable ipifDES-65004#enable ipif s2 Command enable ipif s2 Success Delete ipif Disable ipif Show ipif ipifname Show ipif Config igmp Igmp Commands Including Igmp Show igmp Lastmemberqueryinterval value 1-25 state enabledShow igmp ipif ipifname Show igmp group group group ipif ipifname Show igmp group 142 Config igmpsnooping Igmp Snooping CommandsConfig igmpsnooping vlanname 32 all hosttimeout Sec 1-16711450 routertimeout sec Config igmpsnooping querier vlanname 32 all Config igmpsnooping querierLastmemberqueryinterval sec 1-25 state enabled Queryinterval sec 1-65535 maxresponsetime sec Enable igmpsnooping forwardmcrouteronly Enable igmpsnoopingLastmemberqueryinterval sec 1-25 − The maximum amount Config routerports Disable igmpsnoopingDisable igmpsnooping forwardmcrouteronly Config routerports vlanname 32 add delete portlist Config routerportsforbidden vlanname 32 add delete Config routerportsforbiddenPortlist Show igmpsnooping Show routerportsShow routerports vlan vlanname 32 static dynamic Forbidden Show igmpsnooping group Show igmpsnooping forwarding vlan vlanname Show igmpsnooping forwarding 151 Access Authentication Control Commands 153 Disable authenpolicy Enable authenpolicyEnable authenpolicy Disable authenpolicy Create authenlogin methodlistname string Create authenlogin methodlistnameShow authenpolicy Show authenpolicy Config authenlogin default methodlistname string Config authenloginConcerning the enable admin command Method tacacs xtacacs tacacs+ radius servergroup Authenticated using the Xtacacs protocol from a remote Authenticated using the Tacacs protocol from a remoteAuthenticated using the Radius protocol from a previously Configured Radius server Show authenlogin Delete authenlogin methodlistnameDelete authenlogin methodlistname string Show authenlogin default methodlistname string 15 all Create authenenable methodlistname string Create authenenable methodlistname Config authenenable default methodlistname string Config authenenableString 15 localenable none Authenticated using the Radius protocol from a remote Authenticated using the TACACS+ protocol from a remoteRadius server previously implemented on the Switch Require the user to be authenticated using a user-defined Show authenenable Delete authenenable methodlistnameDelete authenenable methodlistname string Show authenenable default methodlistname string 15 all Config authen application console telnet ssh http all Config authen applicationLogin enable default methodlistname string Show authen application Show authen application None timeout int 1-255 retransmit Default DES-65004#Create authen serverhost Create authen serverhost ipaddr protocol tacacs xtacacs Config authen serverhost ipaddr protocol tacacs xtacacs Config authen serverhost Delete authen serverhost ipaddr protocol tacacs xtacacs Delete authen serverhostTacacs+ radius Show authen serverhost Show authen serverhost Create authen servergroup Config authen servergroup Server host is using the Xtacacs authentication protocol Server host is using the Tacacs authentication protocolServer host is using the TACACS+ authentication protocol Server host is using the Radius authentication protocol Show authen servergroup Delete authen servergroupDelete authen servergroup string Show authen servergroup string Config authen parameter responsetimeout int Config authen parameter responsetimeoutDarren 10.53.13.2 Tacacs 10.53.13.94 Config authen parameter attempt int Config authen parameter attemptShow authen parameter Parameter attempt int 1-255 Set the maximum number Config admin localenable Enable adminEnable admin DES-65004#enable admin Password 175 SSH Commands Disable ssh Enable sshConfig ssh authmode Show ssh authmode Show ssh authmode Show ssh server Config ssh server Config ssh user username 15 authmode Hostbased Config ssh userPassword Publickey None Hostname string hostnameIP string ipaddr Show ssh user authmode Config ssh algorithm Show ssh algorithm Show ssh algorithm 183 SSL Commands Enable ssl Disable ssl ciphersuite RSAwithRC4128MD5 Disable sslDES-65004#disable ssl Command disable ssl Success Show ssl cachetimeout Config ssl cachetimeoutConfig ssl cachetimeout timeout value Show ssl cachetimeout Download certificate Show ssl 189 802.1X Commands Disable Enable Show 802.1x user Create 802.1x userCreate 802.1x user username Show 802.1x user Show 802.1x authconfiguration ports portlist all Show 802.1x authconfigurationDelete 802.1x user Delete 802.1x user username Forces the Authenticator of the port to become Authorized Show 802.1x authstate ports portlist all Show 802.1x authstate Config 802.1x authmode portbased macbased Config 802.1x authmodeQuit Next Config 802.1x capability ports portlist all authenticator Config 802.1x capability ports Config 802.1x authparameter Reauthperiod sec 1-65535 − Configures the time interval Config 802.1x authprotocolEnablereauth enable disable − Determines whether or not Config 802.1x authprotocol local radiuseap Config 802.1x init portbased ports portlist all Config 802.1x initMacbased ports portlist all macaddress macaddr Config 802.1x reauth portbased ports portlist all Config 802.1x reauth ports Config radius delete Config radius add Config radius serverindex 1-3 ipaddress serverip key Config radiusShow radius Passwd 32 authport udpportnumber Show acctclient Show authclient Show authdiagnosticsShow authclient Show authsessionstatistics Show authstatistics ports portlist all Show authstatistics 208 Access Control List ACL Commands Including CPU Create accessprofile profileid 1 ip sourceipmask 211 Command Parameters Accessprofile command, below Create accessprofile for EthernetCreate accessprofile profileid value 1-8 ethernet vlan Sourcemac macmask destinationmac macmask Config accessprofile profileid for Ethernet Delete accessid value 1-65535 − Use this command to delete a Create accessprofile IP Mask hex 0x0-0xffffffff 0x0-0xffff dstportmask hex 0x0-xffff protocolid user Userdefine hex 0x0-0xfffffff − Enter a hexidecimal value Config accessprofile profileid IP 218 Their header Create accessprofile packet content mask Config accessprofile profileid packet content mask Written to the Dscp field of an incoming packet that meets May be specified for the Packet Content access profileOver-write the value in the Dscp field of the packet Config accessprofile command, below Create accessprofile ipv6Create accessprofile ipv6 profileid value 1-8 class Flowlabel sourceipv6mask ipv6mask Value 1-65535 ipv6 class value 0-255 flowlabel hex Config accessprofile profileid ipv60xfffff sourceipv6 ipv6addr destionationipv6 Ipv6addr port port permit priority value Specified for the IPv6 access profile Delete accessprofileDelete accessprofile profileid value Show accessprofile profileid value Show accessprofile Create cpu accessprofile 228 Delete cpu accessprofile profileid value Delete cpu accessprofile Config cpu accessprofile 231 Userdefinemask hex 0x0-0xffffffff − Specifies that the rule Disable cpuinterfacefiltering Enable cpuinterfacefilteringShow cpuinterfacefiltering Show cpuaccessprofile profileid value Show cpuaccessprofile Safeguard Engine Commands Config safeguardengine state enable disable utilization Config safeguardengineEnable disable mode strict fuzzy Rising value 20-100 falling value 20-100 traplog Show safeguardengine Show safeguardengine Config trafficsegmentation Traffic Segmentation CommandsConfig trafficsegmentation portlist all forwardlist null All portlist Show trafficsegmentation portlist Show trafficsegmentation Link Single IP Management Commands Command Parameters Disable sim Enable simShow sim Candidates candidateid 1-100 Entering this parameter will Group commandermac macaddr Entering this parameter will 244 Example usage To view SIM neighbors Config simgroup Reconfig Config sim commander groupname groupname Config simCandidate dpinterval 30-90 holdtime sec To change the hold time of the discovery protocol Download simms Download simms firmware configuration ipaddrPathfilename members mslist 1-32 all Upload simms configuration ipaddr pathfilename Upload simms configurationMemberid Config sntp Time and Sntp CommandsConfig sntp primary ipaddr secondary ipaddr poll Interval int Enable sntp Enable sntpShow sntp Show sntp Config time Disable sntp Config timezone operator + hour gmthour Config dstMin minute DST Show time Show time Create arpentry ARP CommandsDelete arpentry Create arpentry ipaddr macaddr DES-65004#delete arpentry Command delete arpentry Success Config arpaging timeConfig arpaging time value Show arpentry Show arpentry ipaddress ipaddr Show arpentry ipaddress Clear arptable DES-65004#clear arptable Command clear arptable SuccessClear arptable Enable vrrp Vrrp CommandsEnable vrrp ping DES-65004#enable vrrp Command enable vrrp Success Disable vrrpDES-65004#enable vrrp ping Command enable vrrp ping Success Disable vrrp ping Criticalipstate enable disable Enable disable priority int 1-254 advertisementintervalCreate vrrp vrid Vrid vrid 1-255 ipif ipifname 12 ipaddress ipaddr state Config vrrp vrid vrid 1-255 ipif ipifname 12 state enable Config vrrp vridDisable priority int 1-254 ipaddress ipaddr Criticalip ipaddr criticalipstate enable disable Disable Config vrrp ipif Show vrrp ipif ipifname 12 vrid vrid Show vrrp Vrid Delete vrrp Primary backup Routing Table CommandsCreate iproute Create iproute networkaddress ipaddr metric Create iproute default ipaddr metric Create iproute defaultDelete iproute networkaddress ipaddr primary backup Delete iproute Delete iproute default ipaddr Delete iproute defaultShow iproute Show iproute networkaddress static rip ospf Create route redistribute dst ospf src Route Redistribution CommandsCreate route redistribute dst ospf src static rip local Mettype 1 2 metric value Create route redistribute dst rip src all internal external Create route redistribute dst rip srcType1 type2 inter+e1 inter+e2 metric value Src all internal external type1 type2 inter+e1 inter+e2 − Static Not applicable Config route redistribute dst ospf src Config route redistribute dst rip src local static ospf all Config route redistribute dst rip srcInternal external type1 type2 inter+e1 inter+e2 Metric value Delete route redistribute dst rip ospf src rip static local Delete route redistributeOspf Show route redistribute dst rip ospf src rip static local Show route redistributeType-2 Total Entries DES-65004# Config dhcprelay Dhcp Relay CommandsConfig dhcprelay hops value 1-16 time sec Config dhcprelay delete ipif Config dhcprelay add ipifConfig dhcprelay add ipif ipifname 12 ipaddr Config dhcprelay delete ipif ipifname 12 ipaddr Config dhcprelay option82 check Config dhcprelay option82 stateConfig dhcprelay option82 state enable disable Config dhcprelay option82 check enable disable Config dhcprelay option82 policy replace drop keep Config dhcprelay option82 policyShow dhcprelay Show dhcprelay ipif ipifname Enable dhcprelay Enable dhcprelayDES-65004#enable dhcprelay Command enable dhcprelay Success Disable dhcprelay Disable dhcprelay Config dnsr DNS Relay CommandsConfig dnsr primary secondary nameserver ipaddr Add delete static domainname 32 ipaddr Enable dnsr cache static Enable dnsrDES-65004#enable dnsr Command enable dnsr Success Disable dnsr cache static Disable dnsrDES-65004#disable dnsr Command disable dnsr Success Show dnsr Config rip RIP Commands Disable rip Enable ripEnable rip DES-65004#enable rip Command enable rip Success Show rip DES-65004#disable rip Command disable rip SuccessShow rip ipif ipifname Config dvmrp ipif ipifname 12 all metric value Config dvmrpProbe sec 1-65535 neighbortimeout sec Neighbortimeout second 1-65535 − The time period for Disable dvmrp Enable dvmrpEnable dvmrp DES-65004#enable dvmrp Command enable dvmrp Success Show dvmrp neighbor Show dvmrp routingtable System 10.2.1.123 250 Total Entries DES-65004# Show dvmrp nexthopShow dvmrp nexthop ipaddress networkaddress ipif Ipifname 10.0.0.0/8 Ip3 Show dvmrp20.0.0.0/8 System Leaf Ip3 30.0.0.0/8 System Leaf Ip2 Config pim PIM CommandsConfig pim ipif ipifname 12 all hello sec Jpinterval sec 1-18724 state enabled disabled Disable pim Enable pim Show pim Show pim neighborShow pim neighbor ipif ipifname 12 ipaddress Show pim ipif ipifname 298 Show ipmc cache IP Multicasting CommandsShow ipmc cache group group ipaddress Show ipmc ipif ipifname 12 protocol inactive dvmrp Show ipmcPim Config md5 key MD5 Configuration CommandsCreate md5 key keyid 1-255 password Config md5 key keyid 1-255 password Delete md5 key DES-65004# delete md5 key Command delete md5 key SuccessShow md5 Delete md5 key keyid Ospf Configuration Commands Enable ospf Config ospf routeridConfig ospf routerid ipaddr Enable ospf Show ospf Disable ospf Advertise 10.1.1.1 20.1.1.1 None Delete ospf area Create ospf area Config ospf area areaid type normal stub Config ospf areaStubsummary enabled disabled − Allows the Ospf area Show ospf area Delete ospf hostroute Create ospf hostrouteCreate ospf hostroute ipaddr area areaid metric Delete ospf hostroute ipaddr Config ospf hostroute ipaddr area areaid metric Config ospf hostrouteShow ospf hostroute Show ospf hostroute ipaddr Delete ospf aggregation Create ospf aggregation Config ospf aggregation areaid networkaddress Config ospf aggregationAdvertise enabled disabled − Allows for the advertisement Show ospf aggregation Show ospf lsdb areaid areaid advertiserouter Show ospf lsdbIpaddr type rtrlink netlink summary assummary Asextlink Show ospf neighbor DES-65004#show ospf lsdb Command show ospf lsdb AreaShow ospf virtualneighbor Show ospf neighbor ipaddr Config ospf ipif ipifname 12 area areaid priority Config ospf ipifAuthentication none simple password 8 md5 Keyid 1-255 metric value 1-65535 state enabled Config ospf all area areaid priority value Config ospf allAuthentication none simple password 8 md5 keyid Metric value 1-65535 state enabled disabled Show ospf ipif ipifname Show ospf ipif Show ospf all Show ospf all Create ospf virtuallink areaid neighborid Create ospf virtuallink Config ospf virtuallink areaid neighborid Config ospf virtuallink Show ospf virtuallink Delete ospf virtuallinkDelete ospf virtuallink areaid neighborid Show ospf virtuallink areaid neighborid 322 Enable jumboframe Jumbo Frame CommandsDisable jumboframe Enable jumboframe Show jumboframe DES-65004#show jumboframe Command show jumboframe OffShow jumboframe Command History List Show commandhistory Config commandhistory value Config commandhistory Technical Specifications RAM Buffer Transmission MethodFiltering Address Table Packet Filtering Protocols StandardData Transfer Rates Ethernet 331