D-Link DGS-3212SR, Command Line Interface Reference Manual

Page: 166 / 269

DGS-3212SR Layer 3 Gigabit Switch
create authen_login method_list_name
Description This command is used to create a list for authentication techniques
for user login. The switch can support up to eight method lists, but
one is reserved as a default and cannot be deleted. Multiple method
lists must be created and configured separately.
Parameters <string 15> - Enter an alphanumeric string of up to 15 characters to
define the given method list .
Restrictions Only administrator-level users can issue this command.
Example usage:
To create the method list “Trinity.”:
DGS-3212SR:4#create authen_login method_list_name Trinity
Command: create authen_login method_list_name Trinity
Success.
DGS-3212SR:4#
config authen_login
Purpose Used to configure a user-defined or default method list of
authentication methods for user login.
Syntax config authen_login [default | method_list_name <string 15>]
method {tacacs | xtacacs | | radius | server_group
<string 15> | local | none}
Description This command will configure a user-defined or default method list of
authentication methods for users logging on to the switch. The
sequence of methods implemented in this command will affect the
authentication result. For example, if a user enters a sequence of
methods like
tacacs – xtacacs – local, the switch will send an
authentication request to the first tacacs host in the server group. If
no response comes from the server host, the switch will send an
authentication request to the second
tacacs host in the server group
and so on, until the list is exhausted. At that point, the switch will
restart the same sequence with the following protocol listed,
xtacacs .
If no authentication takes place using the xtacacs list, the local
account database set in the switch is used to authenticate the user.
When the local method is used, the privilege level will be dependant
on the local account privilege configured on the switch.
Successful login using any of these methods will give the user a
“user” privilege only. If the user wishes to upgrade his or her status to
the administrator level, the user must implement the
enable admin
command, followed by a previously configured password. ( See the
enable admin part of this section for more detailed information,
concerning the enable admin command.)
154