Lantronix 900-510 manual Authentication Commands, To set ordering of authentication methods

	11: User Authentication
TACACS+	TACACS+ allows a remote access server to communicate with an
(Terminal Access	authentication server to determine whether the user has access to the
Controller Access	network. TACACS+ is a completely new protocol and is not compatible
Control System)	with TACACS or XTACACS. The SLB branch office manager supports
	TACACS+ only.
Local Users	Local accounts authenticate users who attempt to log in via SSH,
	Telnet, the Web, or the console port.

3.To disable a method currently in the Enabled methods list, select the method and click the right arrow between the lists.

4.To set the order in which the SLB branch office manager will authenticate users, use the up and down arrows to the left of the Enabled methods list.

5.For Attempt next method on authentication rejection, you have the following options:

To enable the SLB device to use all methods, in order of precedence, until it obtains a successful authentication, select the check box. This is the default.

To enable the SLB branch office manager to use only the first authentication method that responds (in case a server is down or unavailable), clear the check box.

6.Click Apply.

Now that you have enabled one or more authentication methods, you must configure them.

Authentication Commands

The following command for the command line interface corresponds to the web page entries described above.

To set ordering of authentication methods:

Note: Local Users authentication is always the first method used. Any methods omitted from the command will be disabled.

set auth <one or more parameters>

Parameters:

authusenextmethod <enabledisable> kerberos <1-6>

ldap <1-6> localusers <1-6> nis <1-6> radius <1-6> tacacs+ <1-6>

To view authentication methods and their order of precedence:

show auth

SLB™ Branch Office Manager User Guide 136