Dell PowerConnect 5316M, Справочное руководство

Страница: 68 / 378

48
AAA Commands
• Create a list by entering the aaa authentication login list-name method command for a
particular protocol, where list-name is any character string used to name this list. The method
argument identifies the list of methods that the authentication algorithm tries, in the given
sequence.
• The additional methods of authentication are used only if the previous method returns an
error, not if it fails. To ensure that the authentication succeeds even if all methods return an
error, specify none as the final method in the command line.
Example
The following example configures authentication login.
aaa authentication enable
The aaa authentication enable Global Configuration mode command defines authentication
method lists for accessing higher privilege levels. To return to the default configuration use the no
form of this command.
Syntax
aaa authentication enable { default | list-name } method1 [ method2 ...]
no aaa authentication enable default
• default — Uses the listed authentication methods that follow this argument as the
default list of methods, when using higher privilege levels.
• list-name — Character string, up to 12 characters, used to name the list of authentication
methods activated, when using access higher privilege levels.
• method1 [ method2 ...] — Specify at least one from the following table:
console(config)# aaa authentication login default radius local
enable none
Keyword Description
enable Uses the enable password for authentication.
line Uses the line password for authentication.
none Uses no authentication.
radius Uses the list of all RADIUS servers for authentication. Uses username
"$enabx$." where x is the privilege level.
tacacs Uses the list of all servers for authentication. Uses
username "$enabx$." where x is the privilege level.