D-Link xStack DGS-3400 Series Reference Manual page 57

xStack
DGS-3450:admin# show authen_login method_list_name login_list_1
Command: show authen_login method_list_name login_list_1
Method List Name
----------------
login_list_1
DGS-3450:admin#
create authen_enable method_list_name
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To create a user-defined method list called "enable_list_1" for promoting a user's privilege to Admin level:
DGS-3450:admin# create authen_enable method_list_name enable_list_1
Command: create authen_enable method_list_name enable_list_1
Success.
DGS-3450:admin#
config authen_enable
Purpose
Syntax
Description
Parameters
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
Priority Method Name
-------- ---------------
1 tacacs+
2 tacacs
3 mix_1
4 local
This command is used to create a user-defined method list of authentication methods for
promoting a user's privilege to Admin level.
create authen_enable method_list_name <string 15>
Creates a user-defined method list of authentication methods for promoting a user's privilege
to Admin level. The maximum number of supported enable method lists is 8.
<string 15> - The user-defined method list name
Only Administrator can issue this command.
This command is used to configure a user-defined or default method list of authentication
methods for promoting a user's privilege to Admin level.
config authen_enable [default | method_list_name <string 15>] method {tacacs |
xtacacs | tacacs+ | radius | server_group <string 15> | local _enable | none}
Configures a user-defined or default method list of authentication methods for promoting a
user's privilege to Admin level. The sequence of methods will affect the authentication result.
For example, if the sequence is tacacs+ first, followed by tacacs and local_enable, when a
user tries to login, the authentication request will be sent to the first server host in the tacacs+
built-in server group. If the first server host in the tacacs+ group is missing, the authentication
request will be sent to the second server host in the tacacs+ group, and so on. If all server
hosts in the tacacs+ group are missing, the authentication request will be sent to the first
server host in the tacacs group. If all server hosts in the tacacs group are missing, the local
enable password in the device will be used to authenticate the user's password. The local
enable password in the device can be configured using the "config admin local_password"
CLI command.
default - Specify the default method list of authentication methods.
method_list_name - Specify the user-defined method list of authentication methods.
tacacs - Specify authentication by the built-in server group "tacacs".
xtacacs - Specify authentication by the built-in server group "xtacacs".
Comment
------------------
Built-in Group
Built-in Group
User-defined Group
Keyword
53