
User Manual for the NETGEAR 7300 Series Layer 3 Managed Switch Software
Security Commands
This section describes commands used for configuring security settings for login users and port users.
authentication login
This command creates an authentication login list. The <listname> is up to 15 alphanumeric characters and is not case sensitive. Up to 10 authentication login lists can be configured on the switch. When a list is created, the authentication method “local” is set as the first method.
When the optional parameters “Option1”, “Option2” and/or “Option3” are used, an ordered list of methods are set in the authentication login list. If the authentication login list does not exist, a new authentication login list os first created and then the authentication methods are set in the authentication login list. The maximum number of authentication login methods is three. The possible method values are local, radius and reject.
The value of local indicates that the user’s locally stored ID and password are used for authentication. The value of radius indicates that the user’s ID and password will be authenticated using the RADIUS server. The value of reject indicates that the user is never authenticated.
To authenticate a user, the authentication methods in the user’s login will be attempted in order until an authentication attempt succeeds or fails.
Note that the default login list included with the default configuration can not be changed.
Format | authentication login <listname> [method1 [method2 |
| [method3]]] |
Mode | Global Config |
no authentication login |
|
This command deletes the specified authentication login list. The attempt to delete will fail if any of the following conditions are true:
•The login list name is invalid or does not match an existing authentication login list
•The specified authentication login list is assigned to any user or to the nonconfigured user for any component
•The login list is the default login list included with the default configuration and was not created using ‘config authentication login create’. The default login list cannot be deleted.
Switching Commands |