Table of Contents
Advertisement
10.1 Security Commands
This section describes commands used for configuring security settings for login users and port users.
10.1.1 authentication login
This command creates an authentication login list. The <listname> is up to 15 alphanumeric characters
and is not case sensitive. Up to 10 authentication login lists can be configured on the switch. When a list
is created, the authentication method "local" is set as the first method.
When the optional parameters "Option1", "Option2" and/or "Option3" are used, an ordered list of methods
are set in the authentication login list. If the authentication login list does not exist, a new authentication
login list os first created and then the authentication methods are set in the authentication login list. The
maximum number of authentication login methods is three. The possible method values are local, radius
and reject.
The value of local indicates that the user's locally stored ID and password are used for authentication.
The value of radius indicates that the user's ID and password will be authenticated using the RADIUS
server. The value of reject indicates that the user is never authenticated.
To authenticate a user, the authentication methods in the user's login will be attempted in order until an
authentication attempt succeeds or fails.
Note that the default login list included with the default configuration can not be changed.
▫
Format
authentication login <listname> [method1 [method2 [method3]]]
▫
Mode
Global Config
10.1.1.1 no authentication login
This command deletes the specified authentication login list. The attempt to delete will fail if any of the
following conditions are true:
▫
The login list name is invalid or does not match an existing authentication login list
▫
The specified authentication login list is assigned to any user or to the nonconfigured user for any
component
▫
The login list is the default login list included with the default configuration and was not created
using 'authentication login'. The default login list cannot be deleted.
▫
Format
no authentication login <listname>
▫
Mode
Global Config
10. CLI COMMANDS: SECURITY
Advertisement
Table of Contents
