authentication login

dot1x timeout on page 174

dot1x user on page 175

show authentication on page 175

show authentication users on page 176

show dot1x on page 176

show dot1x users on page 179

show users authentication on page 179

users defaultlogin on page 180

users login on page 180

authentication login

This command creates an authentication login list. To authenticate a user, the authentication methods in the user’s login will be attempted in the order specified by the list until an authentication attempt succeeds or fails.

Note: The default login list included with the default configuration can not be changed.

Syntax authentication login listname [method1 [method2 [method3]]]

no authentication login listname

The listname is up to 15 alphanumeric characters and is not case sensitive. Up to 10 authentication login lists can be configured on the switch. When a list is created, the authentication method “local” is set as the first method by default.

When the optional parameters method1, and, optionally, method2 and method3 are used, an ordered list of the methods specified in those parameters is set in the authentication login list. If the authentication login list does not exist, a new authentication login list is first created and then the authentication methods are set in the list. The maximum number of authentication login methods is three. The possible method values are local, radius, tacacs, and reject:

The local keyword indicates that the user’s locally stored ID and password are used for authentication.

The radius keyword indicates that the user’s ID and password will be authenticated using a RADIUS server.

The tacacs keyword indicates that the user’s ID and password will be authenticated using a TACACS+ server.

The reject keyword indicates the user is never authenticated.

SFTOS Command Reference for the S2410, Version 2.4.1.0

169

Page 169
Image 169
Force10 Networks S2410s manual Authentication login, No authentication login listname