5000 Series Layer 2/3 Managed Data Center Switch CLI Reference Guide
56
Command Mode
Global Config
Example
The following is an example of the command.
(Routing)#
(Routing)#configure
(Routing)(config)#aaa accounting commands default stop-only tacacs
(Routing)(config)#aaa accounting exec default start-stop radius
(Routing)(config)#aaa accounting dot1x default start-stop radius
(Routing)(config)#aaa accounting dot1x default none
(Routing)(config)#exit
The administrator can change the record type, or the methods list, for the same set of accounting type
and list name without being required to first delete the previous configuration.
(Routing)#
(Routing)#configure
(Routing)(config)#aaa accounting exec ExecList stop-only tacacs
(Routing)(config)#aaa accounting exec ExecList start-stop tacacs
(Routing)(config)#aaa accounting exec ExecList start-stop tacacs radius
In the example above, the first
aaa
command causes method list for exec sessions with the name
ExecList
to be created, with the
record-type
being
stop-only
and the
method
being
. The
second command causes the
record type
to be changed to
start-stop
from
stop-only
for the same
method list. The third command, used for the same list, causes the
methods
list to be changed to
{tacacs,radius}
from {tacacs}.
The following is another example of the command.
(Routing)#
(Routing)#configure
(Routing)(config)#aaa accounting commands userCmdAudit stop-only tacacs radius
(Routing)(config)#no aaa accounting commands userCmdAudit
(Routing)(config)#exit
4-54
aaa authentication commands
aaa authentication enable
This command is used to set authentication to allow the accessing of higher privilege levels. The
enableList is the
default enable list. This default list is used by the console and contains the method as
“enable” followed by
none
.
For Telnet and SSH users, a different default enable list,
enableNetList
, is used (that is, instead of
enableList)
. This alternative list is applied for Telnet and SSH by default and contains “
enable
” followed
by the
deny
methods. In D-LINK OS, the enable password is, by default, not configured. This means that,
by default, users of Telnet and SSH will not get access to the Privileged EXEC mode. On the other hand,
under the default conditions, a console user will always enter the Privileged EXEC mode without needing
to enter the
enable
password.
When using the
enable authentication
command, the default and optional list names created with the
aaa authentication enable
command are used. The user can create a list by entering the
aaa
authentication enable list-name method
command, where the
list-name
is any string of characters
