DGS-1210/ME Metro Ethernet Switch CLI Reference Guide
437
DGS-1210-28MP/ME:5# create authen_login method_list_name Trinity
Command: create authen_login method_list_name Trinity
Success.
DGS-1210-28MP/ME:5#
config authen_login
Purpose
To configure a user-defined or default
method list
of authentication
methods for user login.
Syntax
config authen_login [default | method_list_name <string 15>]
method [ | radius | local | server_group <string 15> |
none]
Description
The
config authen_login
command configures a user-defined or
default
method list
of authentication methods for users logging on to
the Switch. The sequence of methods implemented in this command
affects the authentication result. For example, if a user enters a
sequence of methods like
tacacs – local,
the Switch sends an
authentication request to the first
tacacs
host in the server group. If
no response comes from the server host, the Switch sends an
authentication request to the second
tacacs
host in the server group
and so on, until the list is exhausted. When the local method is used,
the privilege level is dependant on the local account privilege
configured on the Switch.
Successful login using any of these methods gives the user a ‘user’
priviledge only. If the user wishes to upgrade his or her status to the
administrator level, the user must implement the
enable admin
command, followed by a previously configured password. (
See the
enable admin part of this section for more detailed information,
concerning the enable admin command.)
Parameters
default
– The default method list for access authentication, as
defined by the user. The user may choose one or more of the
following authentication methods:
– Specifies that the user is to be authenticated
using the
protocol from the remote
server hosts
of the
server group
list.
radius
- Specifies that the user is to be authenticated using
the
RADIUS
protocol from the remote RADIUS
server hosts
of the RADIUS
server group
list.
local -
Specifies that the user is to be authenticated using
the local
user account
database on the Switch.
server_group <string 15>
–Specifies that the user is to be
authenticated using the server group
account
database on
the Switch.
none
– Specifies that no authentication is required to
access the Switch.
method_list_name <string 15>
– Specifies a previously created
method list name defined by the user. One or more of the following
authentication methods may be added to this method list:
– Specifies that the user is to be authenticated
