5000 Series Layer 2/3 Managed Data Center Switch CLI Reference Guide
57
used to name the list. The list of methods that the authentication algorithm tries is tried in the sequence in
which they are identified in the
method
argument.
If no password is configured, the user manager returns ERROR (not PASS or FAIL) for the enable and
line methods, and then moves on to the next configured method in the authentication list. If the method
none
is used, it indicates that no authentication is needed.
A prompt will only appear asking the user for an enable password if one is required. The authentication
methods that follow do not require passwords:
1. none
2. deny
3. enable (When no enable password is configured)
4. line (When no line password is configured)
Example
Please consider the examples below.
a. aaa authentication enable default enable none
b. aaa authentication enable default line none
c. aaa authentication enable default enable radius none
d. aaa authentication enable default line tacacs none
Examples
a
and
b
do not result in a prompt for a password; however, because they contain the RADIUS
and methods, respectively, examples
c
and
d
do cause the password prompt to be displayed.
lf only enable is included as a login method, and if no enable password is configured, then D-LINK OS
does not produce a prompt for a username. In such cases, D-LINK OS only produces a prompt for a
password. D-LINK OS supports the configuring of methods after the local method is tried in the
authentication and authorization lists. The next configured method is tried only if the user is not present in
the local database.
Only if the previous method returns an error are the additional methods of authentication used (that is,
they are not used it if simply fails). If the user wishes to ensure that the authentication succeeds even if
an error is returned by all the methods, the user should specify
none
as the final method in the command
line.
Note:
Requests sent to a RADIUS server by the switch include the username
$enabx$
, where
x
indicates
the requested privilege level. In order to ensure that enable is authenticated on RADIUS servers, the user
should add
$enabx$
users to them. By doing so, the login user ID will now be sent to servers
for enable authentication.
The
no
command is used to return to the default configuration.
aaa authentication enable {default | list-name} method1 [method2…]
no aaa authentication enable {default | list-name}
Parameters
default
Indicates that the listed authentication methods that follow this argument
are used as the default list of methods when higher privilege levels are
used.
list-name
Indicates the string of characters of up to 15 characters in length that is
used to name the list of authentication methods that are activated when
accessing higher privilege levels.
method1...[method2…]
Indicates that at least one of the following methods will be used:
Содержание 5000 Series
Страница 1: ...Draft 1 2 1 ...
Страница 141: ...5000 Series Layer 2 3 Managed Data Center Switch CLI Reference Guide 135 ...
