Configuration Task List for AAA Authentication
The following sections provide the configuration tasks.
•
•
Configuring AAA Authentication Login Methods
•
Enabling AAA Authentication
•
Enabling AAA Authentication - RADIUS
For a complete list of all commands related to login authentication, refer to the
Security
chapter in the
Dell Networking OS Command Reference Guide
.
Configure Login Authentication for Terminal Lines
You can assign up to five authentication methods to a method list. Dell Networking OS evaluates the
methods in the order in which you enter them in each list.
If the first method list does not respond or returns an error, Dell Networking OS applies the next method
list until the user either passes or fails the authentication. If the user fails a method list, Dell Networking
OS does not apply the next method list.
Configuring AAA Authentication Login Methods
To configure an authentication method and method list, use the following commands.
Dell Networking OS Behavior
: If you use a method list on the console port in which RADIUS or TACACS
is the last authentication method, and the server is not reachable, Dell Networking OS allows access even
though the username and password credentials cannot be verified. Only the console port behaves this
way, and does so to ensure that users are not locked out of the system if network-wide issue prevents
access to these servers.
1.
Define an authentication method-list (
method-list-name
) or specify the default.
CONFIGURATION mode
aaa authentication login {
method-list-name
| default}
method1
[
... method4
]
The default method-list is applied to all terminal lines.
Possible methods are:
•
enable
: use the password you defined using the
enable secret
or
enable password
command in CONFIGURATION mode.
•
line
: use the password you defined using the
password
command in LINE mode.
•
local
: use the username/password database defined in the local configuration.
•
none
: no authentication.
•
radius
: use the RADIUS servers configured with the radius-server host command.
•
: use the servers configured with the
tacacs-server host
command.
2.
Enter LINE mode.
CONFIGURATION mode
line {aux 0 | console 0 | vty
number
[
... end-number
]}
3.
Assign a
method-list-name
or the default list to the terminal line.
LINE mode
login authentication {
method-list-name
| default}
774
Security
Содержание S6000-ON
Страница 1: ...Dell Configuration Guide for the S6000 ON System 9 9 0 0 ...
Страница 505: ...Figure 60 Inspecting Configuration of LAG 10 on ALPHA Link Aggregation Control Protocol LACP 505 ...
Страница 508: ...Figure 62 Inspecting a LAG Port on BRAVO Using the show interface Command 508 Link Aggregation Control Protocol LACP ...
Страница 509: ...Figure 63 Inspecting LAG 10 Using the show interfaces port channel Command Link Aggregation Control Protocol LACP 509 ...
Страница 552: ...mac address table static multicast mac address vlan vlan id output range interface 552 Microsoft Network Load Balancing ...
Страница 557: ...Figure 80 Configuring OSPF and BGP for MSDP Multicast Source Discovery Protocol MSDP 557 ...
Страница 558: ...Figure 81 Configuring PIM in Multiple Routing Domains 558 Multicast Source Discovery Protocol MSDP ...
Страница 562: ...Figure 83 MSDP Default Peer Scenario 1 562 Multicast Source Discovery Protocol MSDP ...
Страница 563: ...Figure 84 MSDP Default Peer Scenario 2 Multicast Source Discovery Protocol MSDP 563 ...
Страница 564: ...Figure 85 MSDP Default Peer Scenario 3 564 Multicast Source Discovery Protocol MSDP ...
Страница 665: ...Policy based Routing PBR 665 ...
Страница 672: ...ip pim bsr border Remove candidate RP advertisements clear ip pim rp mapping 672 PIM Sparse Mode PIM SM ...
Страница 818: ...Figure 110 Single and Double Tag TPID Match 818 Service Provider Bridging ...
Страница 819: ...Figure 111 Single and Double Tag First byte TPID Match Service Provider Bridging 819 ...
Страница 995: ...Figure 140 Setup OSPF and Static Routes Virtual Routing and Forwarding VRF 995 ...