D-Link 3312SR - Switch, Справочное руководство по интерфейсу командной строки

Страница: 147 / 305

DGS-3312SR Layer 3 Gigabit Switch
141
To create the method list “Trinity.”:
DGS-3312SR:4#create authen_login method_list_name Trinity
Command: create authen_login method_list_name Trinity
Success.
DGS-3312SR:4#
config authen_login
Purpose Used to configure a user-defined or default method list of
authentication methods for user login.
Syntax config authen_login [default | method_list_name <string 15>]
method {tacacs | xtacacs | | radius | server_group
<string 15> | local | none}
Description This command will configure a user-defined or default method list of
authentication methods for users logging on to the switch. The
sequence of methods implemented in this command will affect the
authentication result. For example, if a user enters a sequence of
methods like
tacacs – xtacacs – local, the switch will send an
authentication request to the first tacacs host in the server group. If
no response comes from the server host, the switch will send an
authentication request to the second
tacacs host in the server group
and so on, until the list is exhausted. At that point, the switch will
restart the same sequence with the following protocol listed,
xtacacs .
If no authentication takes place using the xtacacs list, the local
account database set in the switch is used to authenticate the user.
When the local method is used, the privilege level will be dependant
on the local account privilege configured on the switch.
Successful login using any of these methods will give the user a
“user” privilege only. If the user wishes to upgrade his or her status to
the administrator level, the user must implement the
enable admin
command, followed by a previously configured password. ( See the
enable admin part of this section for more detailed information,
concerning the enable admin command.)