43
CHAPTER 3
INTRODUCTION TO CLI
tacacs:
Use remote server(s) for authentication.
NOTE:
Methods that involve remote servers will time out if the remote servers are offline. In this case the next method
is tried. Each method is tried and continues until a method either approves or rejects a user. If a remote server is used
for primary authentication it is recommended to configure secondary authentication as 'local'. This will enable the
management client to login via the local user database if none of the configured authentication servers are alive.
Example:
Set the Console client to use remote RADIUS server(s) for authentication.
Negation:
(config)# no aaa authentication login { console | telnet | ssh | http }
Show:
# show aaa
3.9.2 (config)# access management
Syntax:
(config)# access management <access_id> <access_vid> <start_addr> [ to <end_addr> ] { [ web ] [ snmp ]
[ telnet ] | all }
Explanation:
Create an access management rule.
Parameters:
<access_id: 1-16>: Specify an ID for this access management entry.
<access_vid>: Indicates the VLAN ID for the access management entry.
<start_addr> [ to <end_addr> ]: Indicate the starting and ending IP address for the access management entry.
{ [ web ] [ snmp ] [ telnet ] | all }: Specify matched hosts can access the switch from which interface.
Example:
Allow IP 192.168.0.1 to 192.168.0.10 to access the device via Web, SNMP and Telnet.
Negation:
(config)# no access management
(config)# no access management <access_id>
Show:
# show access management [ statistics | <access_id_list> ]
Clear:
# clear access management statistics
# config t
(config)# access management 1 1 192.168.0.1 to 192.168.0.10 all
# config t
(config)# aaa authentication login console radius
Содержание MSW-4424C Series
Страница 1: ...1 MSW 4424C MSW 4424CS L2 Gigabit Carrier Ethernet Switch ...
Страница 382: ......
