xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
51
create authen_login method_list_name
Purpose
This command is used to create a user-defined method list of authentication methods for
users attempting to log in to the Switch.
Syntax
create authen_login method_list_name <string 15>
Description
Creates a user-defined method list of authentication methods for users attempting to log into
the Switch. The maximum number of supported login method lists is 8.
Parameters
<string 15>
- The user-defined method list name
Restrictions
Only Administrator can issue this command.
Example usage:
To create a user-defined method list called “login_list_1” for users attempting to log in to the Switch:
DGS-3450:admin# create authen_login method_list_name login_list_1
Command: create authen_login method_list_name login_list_1
Success.
DGS-3450:admin#
config authen_login
Purpose
This command is used to configure a user-defined or default method list of authentication
methods for users attempting to log in to the Switch.
Syntax
config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs
| | radius | server_group <string 15> | local | none}
Description
Configures a user-defined or default method list of authentication methods for users
attempting to log in to the Switch. The method sequence will affect the authentication result.
For example, if the user specifies first, then tacacs and local, when the user tries to
log in, the authentication request will be sent to the first server host in the built-in
server group. If the first server host in the group is missing, the authentication
request will be sent to the second server host in the group, and so on. If all server
hosts in the group are missing, the authentication request will be sent to the first
server host in the tacacs group. If all server hosts in the tacacs group are missing, the local
account database in the device will be used to authenticate the user. When a user logs in to
the device successfully, using either the tacacs/xtacacs//radius built-in, user-defined
server groups methods, or none, only the “user” privilege level will be assigned. If the user
wants to access admin privilege level, the user must use the “enable admin” command to
promote the privilege level. However, when the local method is used, the privilege level will
depend on the account privilege level stored in the local device.
Parameters
default
- Specify the default method list of authentication methods.
method_list_name
- Specify the user-defined method list of authentication methods.
tacacs
- Specify authentication by the built-in server group “tacacs”.
xtacacs
- Specify authentication by the built-in server group “xtacacs”.
- Specify authentication by the built-in server group “”.
radius
- Specify authentication by the built-in server group “radius”.
server_group
- Specify authentication by the user-defined server group.
local
- Specify authentication by the local user account database in the device.
none
- Specify no authentication.
Restrictions
Only Administrator can issue this command.
Example usage:
