Aaa Authentication Login - NETGEAR ProSafe GSM7224P User Manual

aaa authentication login

Use this command to set authentication at login. The default and optional list names that you
create with the
aaa authentication login
command. Create a list by entering the
authentication
list-name method
string used to name this list. The
authentication algorithm tries, in the given sequence. The additional methods of
authentication are used only if the previous method returns an error, not if it fails.
An example of a method that returns an error is if a RADIUS server is not present, and an
example of a method failing is when a RADIUS server cannot authenticate the client. If 'local'
method is listed first, since local authentication is always available, it only has the fail
condition, not error. As such, if 'local' method is the first in the list, no other method will be
tried.
To ensure that the authentication succeeds even if all methods return an error, specify
as the final method in the command line. For example if
authentication method after
Format
aaa authentication login {default | list-name} method1 [method2...]
Mode
Global Config
Default Uses the listed authentication methods that follow this argument as the default list of
methods when a user logs in.
list-name Character string used to name the list of authentication methods activated when a
user logs in. Up to 12 characters.
method1 [method2...] At least one from the following table:
Keyword
enable
line
local
none
radius
tacacs
The local user database is checked. This has the same effect
Note:
as the following command:
ProSafe Managed Switch
command for a particular protocol, where
method
, no authentication is used if the radius server is down.
radius
Description
Uses the enable password for authentication.
Uses the line password for authentication.
Uses the local username database for authentication.
Uses no authentication.
Uses the list of all RADIUS servers for authentication.
Uses the list of all TACACS servers for authentication.
Management Commands
command are used with the
aaa authentication login
list-name
argument identifies the list of methods that the
is specified as an
none
aaa authentication login local
624
login
is any character
none