SMC Networks 8028L2, Management Manual

Page: 224 / 392

C
HAPTER
11
| Authentication Commands
– 224 –
auth
This command displays or sets authentication server settings.
S
YNTAX
auth [ server-index ] [ enable | disable ] [ ip-addr ] [ secret ]
[ server-port ]
server-index - Allows you to specify up to five servers. These
servers are queried in sequence until a server responds or the
retransmit period expires.
enable - Enables the specified authentication server.
disable - Disables the specified authentication server.
ip-addr - IP address or IP alias of authentication server. An IPv4
address consists of 4 numbers, 0 to 255, separated by periods.
secret - Encryption key used to authenticate logon access for the
client. (Maximum length: 29 characters)
server-port - Network (UDP) port of authentication server used for
authentication messages. (Range: 0-65535, where 0 means that
the switch will use the default port 1812)
To set an empty secret, use two quotes (“”). To use spaces in the
secret, enquote the secret. Quotes in the secret are not allowed.
D
EFAULT
S
ETTING
Authentication: Disabled
Server Port: 49
C
OMMAND
U
SAGE
◆
By default, management access is always checked against the
authentication database stored on the local switch. If a remote
authentication server is used, you must specify the authentication
method and the corresponding parameters for the remote
authentication protocol. Local and remote logon authentication control
management access via Telnet, SSH, or a web browser.
◆
When using logon authentication, the user name and
password must be configured on the authentication server. The
encryption methods used for the authentication process must also be
configured or negotiated between the authentication server and logon
client. This switch can pass authentication messages between the
server and client that have been encrypted using MD5 (Message-Digest
5), TLS (Transport Layer Security), or TTLS (Tunneled Transport Layer
Security).
N
OTE
:
This guide assumes that RADIUS servers have already been
configured to support AAA. The configuration of server software
is beyond the scope of this guide. Refer to the documentation provided
with the RADIUS and server software.