D-Link DGS-3200 SERIES Cli Manual page 296

Format
config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs | tacacs+ |
radius | server_group <string 15> | local | none}
Description
Configure a user-defined or default method list of authentication methods for user login. The sequence of
methods will effect the authentication result. For example, if the sequence is TACACS+ first, then TACACS
and local, when a user trys to login, the authentication request will be sent to the first server host in the
TACACS+ built-in server group. If the first server host in the TACACS+ group is missing, the authentication
request will be sent to the second server host in the TACACS+ group, and so on. If all server hosts in the
TACACS+ group are missing, the authentication request will be sent to the first server host in the TACACS
group. If all server hosts in a TACACS group are missing, the local account database in the device is used
to authenticate this user. When a user logs in to the device successfully while using methods like
TACACS/XTACACS/TACACS+/RADIUS built-in or user-defined server groups or none, the "user"
privilege level is assigned only. If a user wants to get admin privilege level, the user must use the "enable
admin" command to promote his privilege level. But when the local method is used, the privilege level will
depend on this account privilege level stored in the local device.
Parameters
Parameters
default
method_list_name
<string 15>
tacacs
xtacacs
tacacs+
radius
server_group <string
15>
local
none
Restrictions
You must have administrator privilege.
Examples
To configure a user-defined method list for user login:
DGS-3200 Series Layer 2 Gigabit Managed Switch CLI Manual
Description
The default method list of authentication methods.
The user-defined method list of authentication methods.
Authentication by the built-in server group "tacacs".
Authentication by the built-in server group "xtacacs".
Authentication by the built-in server group "tacacs+".
Authentication by the built-in server group "radius".
Authentication by the user-defined server group.
Authentication by local user accout database in device.
No authentication.
296