Extreme Networks EAS 200-24p Switch, Manual

Page: 117 / 908

config authen_login
Extreme Networks EAS 200-24p Switch CLI Manual
117
config authen_login
Description
Configure a user-defined or default method list of authentication methods for user login. The sequence
of methods will effect the altercation result. For example, if the sequence is first, then tacacs and
local, when a user tries to login, the authentication request will be sent to the first server host in
built-in server group. If the first server host in group is missing, the authentication request will
be sent to the second server host in group, and so on. If all server hosts in group are
missing, the authentication request will be sent to the first server host in tacacs group. If all server hosts
in tacacs group are missing, the local account database in the device is used to authenticate this user.
When user logins the device successfully while using methods like tacacs/xtacacs//radius built-
in or user-defined server groups or none, the “user” privilege level is assigned only. If user wants to get
admin privilege level, user must use the “enable admin” command to promote his privilege level. But
when local method is used, the privilege level will depend on this account privilege level stored in the
local device.
Format
config authen_login [default | method_list_name <string 15>] method {tacacs |
xtacacs | | radius | server_group <string 15> | local | none}
Parameters
●
default - The default method list of authentication methods.
●
method_list_name - The user-defined method list of authentication methods.
●
<string 15> - Enter the method list name here. This value can be up to 15 characters long.
●
method - Specifies the authentication method used.
●
tacacs - (Optional) Authentication by the built-in server group “tacacs”.
●
xtacacs - (Optional) Authentication by the built-in server group “xtacacs”.
●
- (Optional) Authentication by the built-in server group “”.
●
radius - (Optional) Authentication by the built-in server group “radius”.
●
server_group - (Optional) Authentication by the user-defined server group.
- <string 15> - Enter the server group value here. This value can be up 15 characters long.
●
local - (Optional) Authentication by local user account database in device.
●
none - (Optional) No authentication.
Restrictions
Only Administrator-level users can issue this command.