D-Link DGS-1510/ME Series, Справочное руководство

Страница: 62 / 654

DGS-1510/ME Series Metro Ethernet Switch CLI Reference Guide
58
Format
create authen_enable method_list_name <string 15>
Parameters
<string 15> - Enter the user-defined method list name. This value can be up to 15 characters long.
Restrictions
Only Administrators can issue this command.
Example
To create a user-defined method list for promoting user's privilege to Admin level:
DGS-1510-28XMP/ME:admin# create authen_enable method_list_name enable_list_1
Command: create authen_enable method_list_name enable_list_1
Success.
DGS-1510-28XMP/ME:admin#
5-11 config authen_enable
Description
This command is used to configure a user-defined or default method list of authentication methods for promoting
user's privilege to Admin level. The sequence of methods will affect the altercation result. For example, if the
sequence is first, then TACACS and local_enable, when the user tries to promote user’s privilege of
Admin level, the authentication request will be sent to the first server host in built-in server group. If the
first server host in group is missing, the authentication request will be sent to the second server host in
group, and so on. If all server hosts in group are missing, the authentication request will be
sent to the first server host in TACACS group and so on. If all server hosts in TACACS group are missing, the local
enable password in the device is used to authenticate this user’s password.
Format
config authen_enable [default | method_list_name <string 15>] method {tacacs | xtacacs | | radius |
server_group <string 15> | local _enable | none}
Parameters
default - Specifies the default method list of authentication methods.
method_list_name - Specifies the user-defined method list of authentication methods.
<string 15> Enter the method list name here. This value can be up to 15 characters long.
method - Specifies the authentication method used.
tacacs - (Optional) Specifies authentication by the built-in server group TACACS.
xtacacs - (Optional) Specifies authentication by the built-in server group XTACACS.
- (Optional) Specifies authentication by the built-in server group .
radius - (Optional) Specifies authentication by the built-in server group RADIUS.
server_group - (Optional) Specifies authentication by the user-defined server group.
<string 15> - Enter the server group name here. This value can be up to 15 characters long.