xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

DES-6500:4#create authen_login method_list_name Trinity

Command: create authen_login method_list_name Trinity

Success.

DES-6500:4#

config authen_login

Purpose

Used to configure a user-defined or default method list of

 

authentication methods for user login.

Syntax

config authen_login [default method_list_name <string 15>]

 

method {tacacs xtacacs tacacs+ radius server_group

 

<string 15> local none}

Description

This command will configure a user-defined or default method list of

 

authentication methods for users logging on to the Switch. The

 

sequence of methods implemented in this command will affect the

 

authentication result. For example, if a user enters a sequence of

 

methods like tacacs – xtacacs – local, the Switch will send an

 

authentication request to the first tacacs host in the server group. If

 

no response comes from the server host, the Switch will send an

 

authentication request to the second tacacs host in the server group

 

and so on, until the list is exhausted. At that point, the Switch will

 

restart the same sequence with the following protocol listed, xtacacs.

 

If no authentication takes place using the xtacacs list, the local

 

account database set in the Switch is used to authenticate the user.

 

When the local method is used, the privilege level will be dependant

 

on the local account privilege configured on the Switch.

 

Successful login using any of these methods will give the user a

 

“user” privilege only. If the user wishes to upgrade his or her status to

 

the administrator level, the user must implement the enable admin

 

command, followed by a previously configured password. (See the

 

enable admin part of this section for more detailed information,

 

concerning the enable admin command.)

Parameters

default – The default method list for access authentication, as defined

 

by the user. The user may choose one or a combination of up to four

 

(4) of the following authentication methods:

 

tacacs – Adding this parameter will require the user to be

 

authenticated using the TACACS protocol from the remote

 

TACACS server hosts of the TACACS server group list.

 

xtacacs – Adding this parameter will require the user to be

 

authenticated using the XTACACS protocol from the remote

 

XTACACS server hosts of the XTACACS server group list.

 

tacacs+ – Adding this parameter will require the user to be

 

authenticated using the TACACS+ protocol from the remote

 

TACACS+ server hosts of the TACACS+ server group list.

 

radius - Adding this parameter will require the user to be

 

authenticated using the RADIUS protocol from the RADIUS

 

server listed in the server group list.

 

server_group <string 15> - Adding this parameter will require

 

the user to be authenticated using a user-defined server

 

group previously configured on the Switch.

 

local - Adding this parameter will require the user to be

156

Page 159
Image 159
D-Link TM DES-6500 Config authenlogin default methodlistname string, Method tacacs xtacacs tacacs+ radius servergroup