D-Link xStack DGS-3420 Series Reference Manual page 73

xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
Example
To create a user-defined method list for promoting a user's privilege to Admin level:
DGS-3420-28SC:admin#create authen_enable method_list_name enable_list_1
Command: create authen_enable method_list_name enable_list_1
Success.
DGS-3420-28SC:admin#
4-11 config authen_enable
Description
This command is used to configure a user-defined or default method list of authentication methods for
promoting a user's privilege to Admin level. The sequence of methods will effect the authencation
result. For example, if the sequence is TACACS+ first, then TACACS and local_enable, when a user
tries to promote a user's privilege to Admin level, the authentication request will be sent to the first
server host in the TACACS+ built-in server group. If the first server host in the TACACS+ group is
missing, the authentication request will be sent to the second server host in the TACACS+ group, and
so on. If all server hosts in the TACACS+ group are missing, the authentication request will be sent to
the first server host in the TACACS group. If all server hosts in the TACACS group are missing, the
local enable password in the device is used to authenticate this user's password. The local enable
password in the device can be configured by the CLI command config admin local_enable.
Format
config authen_enable [default | method_list_name <string 15>] method {tacacs | xtacacs |
tacacs+ | radius | server_group <string 15> | local_enable | none}(1)
Parameters
default - Specify the default method list of authentication methods.
method_list_name - Specify the user-defined method list of authentication methods.
<string 15> - Specify the user-defined method list of authentication methods. The method list
name can be up to 15 characters long.
method - Choose the desired authentication method:
tacacs - Specify authentication by the built-in server group TACACS.
xtacacs - Specify authentication by the built-in server group XTACACS.
tacacs+ - Specify authentication by the built-in server group TACACS+.
radius - Specify authentication by the built-in server group RADIUS.
server_group - Specify authentication by the user-defined server group.
<string 15> - Specify authentication by the user-defined server group. The server group value
can be up to 15 characters long.
local_enable - Specify authentication by local enable password in the device.
none - Specify no authentication.
Restrictions
Only Administrator-level users can issue this command.
68