Authentication Login - Dell Force10 S2410-01-10GE-24P Command Reference Manual

authentication login

Syntax
| Security Commands
188
• dot1x timeout on page 192
• dot1x user on page 193
• show authentication on page 193
• show authentication users on page 194
• show dot1x on page 194
• show dot1x users on page 197
• show users authentication on page 198
• users defaultlogin on page 198
• users login on page 199
This command defines a particular sequence of authentication methods to be used to allow user access
and then assigns a list name to that sequence. To authenticate a user, the authentication methods will be
attempted in the order specified by the list until an authentication attempt succeeds or fails
Note:
The default log-in list, named "defaultList", included with the default configuration
cannot be changed.
authentication login
listname
no authentication login
listname
The listname is up to 15 alphanumeric characters and is not case-sensitive. Up to 10 authentication
log-in lists can be configured on the switch. When a list is created, the authentication method "local" is
set as the first method by default.
When the optional parameters
list of the methods specified in those parameters is set in the authentication login list. If the
authentication login list does not exist, a new authentication login list is first created and then the
authentication methods are set in the list. The maximum number of authentication login methods is
three. The possible method values are local, radius, tacacs, and reject:
The local keyword indicates that the user's locally stored ID and password are used for
•
authentication.
The radius keyword indicates that the user's ID and password will be authenticated using a
•
RADIUS server.
The tacacs keyword indicates that the user's ID and password will be authenticated using a
•
TACACS+ server.
The reject keyword indicates the user is never authenticated.
•
The no version of this command deletes the specified authentication login list. The attempt to delete
fails if any of the following conditions are true:
• The login list name is invalid or does not match an existing authentication login list
• The specified authentication login list is assigned to any user or to the non configured user for any
component
The login list is the default login list included with the default configuration and was not
created using 'authentication login'. The default login list cannot be deleted.
[ method1 [ method2 [ method3
method1 , and, optionally , method2
.
]]]
and method3 are used, an ordered