D-Link xStack DGS-3620-52P, Руководство пользователя

Страница: 66 / 1170

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
61
4-4 create authen_login method_list_name
Description
This command is used to create a user-defined method list of authentication methods for user
login. The maximum supported number of the login method lists is eight.
Format
create authen_login method_list_name <string 15>
Parameters
<string 15> - Specify the user-defined method list name.
Restrictions
Only Administrator-level users can issue this command.
Example
To create a user-defined method list for user login:
DGS-3620-28SC:admin#create authen_login method_list_name login_list_1
Command: create authen_login method_list_name login_list_1
Success.
DGS-3620-28SC:admin#
4-5 config authen_login
Description
This command is used to configure a user-defined or default method list of authentication methods
for user login. The sequence of methods will affect the authentication result. For example, if the
sequence is first, then TACACS and local, when a user trys to login, the authentication
request will be sent to the first server host in the built-in server group. If the first server
host in the group is missing, the authentication request will be sent to the second server
host in the group, and so on. If all server hosts in the group are missing, the
authentication request will be sent to the first server host in the TACACS group. If all server hosts
in a TACACS group are missing, the local account database in the device is used to authenticate
this user. When a user logs in to the device successfully while using methods like
TACACS/XTACACS//RADIUS built-in or user-defined server groups or none, the
“user”
privilege level is assigned only. If a user wants to get admin privilege level, the user must use the
“enable admin” command to promote his privilege level. But when the local method is used, the
privilege level will depend on this account privilege level stored in the local device.
Format
config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs |
| radius | server_group <string 15> | local | none}(1)