xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
369
show authen_login
all
– Entering this parameter will display all the authentication login
methods currently configured on the Switch.
The window will display the following parameters:
Method List Name – The name of a previously configured
method list name.
Priority – Defines which order the method list protocols will
be queried for authentication when a user attempts to log on
to the Switch. Priority ranges from 1(highest) to 4 (lowest).
Method Name – Defines which security protocols are
implemented, per method list name.
Comment – Defines the type of Method.
User-defined Group
refers to server group defined by the user.
Built-in Group
refers to the TACACS, XTACACS, and RADIUS
security protocols which are permanently set in the Switch.
Keyword
refers to authentication using a technique
INSTEAD of TACACS / XTACACS / / RADIUS
which are local (authentication through the user account on
the Switch) and none (no authentication necessary to access
any function on the Switch).
Restrictions None.
Example usage:
To view the authentication login method list named Trinity:
DGS-3627:5#show authen_login method_list_name Trinity
Command: show authen_login method_list_name Trinity
Method List Name Priority Method Name Comment
---------------- -------- --------------- ---------
Dlee 1 Built-in Group
2 tacacs Built-in Group
3 ctsnow User-defined Group
4 local Keyword
DGS-3627:5#
create authen_enable method_list_name
Purpose
Used to create a user-defined method list of authentication methods
for promoting normal user level privileges to Administrator level
privileges on the Switch.
Syntax
create authen_enable method_list_name <string 15>
Description
This command is used to promote users with normal level privileges
to Administrator-level privileges using authentication methods on the
Switch. Once a user acquires normal user-level privileges on the
Switch, he or she must be authenticated by a method on the Switch
to gain administrator privileges on the Switch, which is defined by
the Administrator. A maximum of eight enable method lists can be
implemented on the Switch.
Parameters
<string 15>
- Enter an alphanumeric string of up to 15 characters to
define the given
enable method list
to create.
Restrictions Only
administrator-level users can issue this command.
Example usage:
To create a user-defined method list, named “Permit” for promoting user privileges to Administrator privileges: