Authentication Commands; Authentication Sequence; Authentication Login; Table 4-27 Authentication Commands - Edge-Core ES4625 Management Manual

4
Command Line Interface

Authentication Commands

You can configure this switch to authenticate users logging into the system for
management access using local or remote authentication methods. You can also
enable port-based authentication for network client access using IEEE 802.1X.
Command Group

Authentication Sequence

RADIUS Client
TACACS+ Client
Port Security
Port Authentication
Authentication Sequence
Command

authentication login

authentication enable
authentication login
This command defines the login authentication method and precedence. Use the no
form to restore the default.
Syntax
authentication login {[local] [radius] [tacacs]}
no authentication login
• local - Use local password.
• radius - Use RADIUS server password.
• tacacs - Use TACACS server password.
Default Setting
Local
Command Mode
Global Configuration
Command Usage
• RADIUS uses UDP while TACACS+ uses TCP. UDP only offers best effort
delivery, while TCP offers a connection-oriented transport. Also, note that
RADIUS encrypts only the password in the access-request packet from the
client to the server, while TACACS+ encrypts the entire body of the packet.
4-70

Table 4-27 Authentication Commands

Function
Defines logon authentication method and precedence
Configures settings for authentication via a RADIUS server
Configures settings for authentication via a TACACS+ server
Configures secure addresses for a port
Configures host authentication on specific ports using 802.1X

Table 4-28 Authentication Sequence Commands

Function
Defines logon authentication method and precedence
Defines the authentication method and precedence for
command mode change
Page
4-70
4-72
4-75
4-78
4-80
Mode Page
GC 4-70
GC 4-71