Extreme Networks EAS 200-24p Switch, Manual

Page: 122 / 908

Chapter 5: Access Authentication Control Command List
Extreme Networks EAS 200-24p Switch CLI Manual
122
config authen_enable
Description
Configure a user-defined or default method list of authentication methods for promoting user's
privilege to Admin level. The sequence of methods will affect the altercation result. For example, if the
sequence is first, then tacacs and local_enable, when user try to promote user's privilege to
Admin level, the authentication request will be sent to the first server host in built-in server
group. If the first server host in group is missing, the authentication request will be sent to the
second server host in group, and so on. If all server hosts in group are missing, the
authentication request will be sent to the first server host in tacacs group. If all server hosts in tacacs
group are missing, the local enable password in the device is used to authenticate this user’s password.
Format
config authen_enable [default | method_list_name <string 15>] method {tacacs |
xtacacs | | radius | server_group <string 15> | local _enable | none}
Parameters
●
default - The default method list of authentication methods.
●
method_list_name - The user-defined method list of authentication methods.
●
<string 15> Enter the method list name here. This value can be up to 15 characters long.
●
method - Specifies the authentication method used.
●
tacacs - (Optional) Authentication by the built-in server group “tacacs”.
●
xtacacs - (Optional) Authentication by the built-in server group “xtacacs”.
●
- (Optional) Authentication by the built-in server group “”.
●
radius - (Optional) Authentication by the built-in server group “radius”.
●
server_group - (Optional) Authentication by the user-defined server group.
- <string 15> - Enter the server group name here. This value can be up to 15 characters long.
●
local_enable - (Optional) Authentication by local enable password in device.
●
none - (Optional) No authentication.
Restrictions
Only Administrator-level users can issue this command.