DGS-3200 Series Layer 2 Gigabit Managed Switch CLI Manual
296
Format
config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs | |
radius | server_group <string 15> | local | none}
Description
Configure a user-defined or default method list of authentication methods for user login. The sequence of
methods will effect the authentication result. For example, if the sequence is first, then TACACS
and local, when a user trys to login, the authentication request will be sent to the first server host in the
built-in server group. If the first server host in the group is missing, the authentication
request will be sent to the second server host in the group, and so on. If all server hosts in the
group are missing, the authentication request will be sent to the first server host in the TACACS
group. If all server hosts in a TACACS group are missing, the local account database in the device is used
to authenticate this user. When a user logs in to the device successfully while using methods like
TACACS/XTACACS//RADIUS built-in or user-defined server groups or none, the “user”
privilege level is assigned only. If a user wants to get admin privilege level, the user must use the “enable
admin” command to promote his privilege level. But when the local method is used, the privilege level will
depend on this account privilege level stored in the local device.
Parameters
Parameters
Description
default
The default method list of authentication methods.
method_list_name
<string 15>
The user-defined method list of authentication methods.
tacacs
Authentication by the built-in server group “
tacacs
”.
xtacacs
Authentication by the built-in server group “
xtacacs
”.
Authentication by the built-in server group “
”.
radius
Authentication by the built-in server group “
radius
”.
server_group <string
15>
Authentication by the user-defined server group.
local
Authentication by local user accout database in device.
none
No authentication.
Restrictions
You must have administrator privilege.
Examples
To configure a user-defined method list for user login:
