Table of Contents
Advertisement
DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
config authen_login
Purpose
Used to configure a user-defined or default method list of authentication methods for user
login.
Syntax
config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs
| tacacs+ | radius | server_group <string 15> | local | none}
Description
This command is used to configure a user-defined or default method list of authentication
methods for users logging on to the Switch. The sequence of methods implemented in this
command will affect the authentication result. For example, if a user enters a sequence of
methods like tacacs – xtacacs – local, the Switch will send an authentication request to the
first tacacs host in the server group. If no response comes from the server host, the Switch
will send an authentication request to the second tacacs host in the server group and so on,
until the list is exhausted. At that point, the Switch will restart the same sequence with the
following protocol listed, xtacacs. If no authentication takes place using the xtacacs list, the
local account database set in the Switch is used to authenticate the user. When the local
method is used, the privilege level will be dependant on the local account privilege configured
on the Switch.
Successful login using any of these methods will give the user a "user" privilege only. If the
user wishes to upgrade his or her status to the administrator level, the user must implement
the enable admin command, followed by a previously configured password. (See the enable
admin part of this section for more detailed information, concerning the enable admin
command.)
Parameters
default – The default method list for access authentication, as defined by the user. The user
may choose one or a combination of up to four of the following authentication methods:
method_list_name – Enter a previously implemented method list name defined by the user.
The user may add one, or a combination of up to four of the following authentication methods
to this method list:
•
tacacs – Adding this parameter will require the user to be authenticated using the
TACACS protocol from the remote TACACS server hosts of the TACACS server
group list.
•
xtacacs – Adding this parameter will require the user to be authenticated using the
XTACACS protocol from the remote XTACACS server hosts of the XTACACS server
group list.
•
tacacs+ – Adding this parameter will require the user to be authenticated using the
TACACS+ protocol from the remote TACACS+ server hosts of the TACACS+ server
group list.
•
radius − Adding this parameter will require the user to be authenticated using the
RADIUS protocol from the remote RADIUS server hosts of the RADIUS server group
list.
•
server_group <string 15> − Adding this parameter will require the user to be
authenticated using a user-defined server group previously configured on the Switch.
•
local − Adding this parameter will require the user to be authenticated using the local
user account database on the Switch.
•
none – Adding this parameter will require no authentication to access the Switch.
•
tacacs – Adding this parameter will require the user to be authenticated using the
TACACS protocol from a remote TACACS server.
•
xtacacs – Adding this parameter will require the user to be authenticated using the
XTACACS protocol from a remote XTACACS server.
•
tacacs+ – Adding this parameter will require the user to be authenticated using the
TACACS+ protocol from a remote TACACS+ server.
•
radius − Adding this parameter will require the user to be authenticated using the
RADIUS protocol from a remote RADIUS server.
•
server_group <string 15> − Adding this parameter will require the user to be
authenticated using a user-defined server group previously configured on the Switch.
•
local − Adding this parameter will require the user to be authenticated using the local
user account database on the Switch.
•
none – Adding this parameter will require no authentication to access the Switch.
352
Advertisement
Table of Contents
