Industrial Managed
Ethernet Switch – EH9711
User Manual
Page
42
of
223
Figure 2.30 Webpage to Configure Switch Authentication Method
Table 2.20
Descriptions of Switch Authentication Method
Label
Description
Factory
Default
Authentication Method Configuration
Client
The management client for which the configuration below applies, which consists
of console, telnet, ssh.
-
Methods
Set to one of the following values:
• No: Authentication is disabled and login is not possible.
• Local: Use the local user database on the switch for authentication.
• Radius: Use remote RADIUS server(s) for authentication.
• Tacacs: Use remote server(s) for authentication.
Methods that involve remote servers are timed out if the remote servers are offline.
In this case the next method is tried. Each method is tried from left to right and
continues until a method either approves or rejects a user. If a remote server is used
for primary authentication it is recommended to configure secondary authentication
as 'local'. This will enable the management client to login via the local user
database if none of the configured authentication servers are alive.
local, no, no
Command Authorization Method configuration
Client
The management client for which the configuration below applies.
-
Method
Method can be set to one of the following values:
• No: Command authorization is disabled. User is granted access to CLI commands
according to his privilege level.
• Tacacs: Use remote server(s) for command authorization. If all remote
servers are offline, the user is granted access to CLI commands according to his
privilege level.
no
Cmd Lvl
Authorize all commands with a privilege level higher than or equal to this level.
Valid values are in the range 0 to 15.
0
Cfg Cmd
Also authorize configuration commands.
Unclicked
Accounting Method Configuration webpage
Client
The management client for which the configuration below applies.
-
Method
Method can be set to one of the following values:
• No: Accounting is disabled.
• Tacacs: Use remote server(s) for accounting.
no
