Ericsson ECN330, Руководство пользователя

Страница: 643 / 1226

Command Line Interface
637
1553-KDU 137 365 Uen D 2006-06-16
7.7.3 authentication login
This command defines the login authentication method and precedence. Use
the
no
form to restore the default.
Syntax
authentication login {[local] [radius] [tacacs]}
no authentication login
•
local
- Use local password only.
•
radius
- Use RADIUS server password only.
•
tacacs
- Use TACACS server password only.
Default Setting
Local
Command Mode
Global Configuration
Command Usage
• RADIUS uses UDP while uses TCP. UDP only offers best
effort delivery, while TCP offers a connection-oriented transport. Also,
note that RADIUS encrypts only the password in the access-request
packet from the client to the server, while encrypts the entire
body of the packet.
• RADIUS and logon authentication assigns a specific
privilege level for each user name and password pair. The user name,
password, and privilege level must be configured on the authentication
server.
• Three authentication methods can be specified in a single command to
indicate the authentication sequence. For example, by entering
authentication login radius tacacs local
, the user name
and password on the RADIUS server is verified first. If the RADIUS
server is not available, then authentication is attempted on the