DWS-3160 Series Gigabit Ethernet Unified Switch CLI Reference Guide
69
Format
create authen_login method_list_name <string 15>
Parameters
<string 15>
- The user-defined method list name. This value can be up to 15 characters long.
Restrictions
Only Administrators can issue this command.
Example
To create a user-defined method list for user login:
DWS-3160-24PC:admin# create authen_login method_list_name login_list_1
Command: create authen_login method_list_name login_list_1
Success.
DWS-3160-24PC:admin#
5-7
config authen_login
Description
This command is used to configure a user-defined or default method list of authentication methods
for user login. The sequence of methods will affect the altercation result. For example, if the
sequence is first, then TACACS and local, when user tries to login, the authentication
request will be sent to the first server host in built-in server group. If the first server host
in group is missing, the authentication request will be sent to the second server host in
group, and so on. If all server hosts in group are missing, the authentication
request will be sent to the first server host in TACACS group. If all server hosts in TACACS group
are missing, the local account database in the device is used to authenticate this user. When user
logins the device successfully while using methods like TACACS/XTACACS//RADIUS
built-in or user-defined server groups or none, the “user” privilege level is assigned only. If user
wants to get admin privilege level, user must use the “enable admin” command to promote his
privilege level. But when local method is used, the privilege level will depend on this account
privilege level stored in the local device.
Format
config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs |
| radius | server_group <string 15> | local | none}
Parameters
default
- The default method list of authentication methods.
method_list_name
- The user-defined method list of authentication methods.
<string 15>
- Enter the method list name here. This value can be up to 15 characters long.
method
- Specifies the authentication method used.
tacacs
- (Optional) Authentication by the built-in server group “TACACS”.
