Network Login Commands
ExtremeWare XOS 11.5 supports only the Summit X450 family of switches and the BlackDiamond 8800 series switch.
ExtremeWare XOS 11.5 Command Reference Guide
1072
create netlogin local-user
create netlogin local-user <user-name> {encrypted <password>} {vlan-vsa
[[{tagged | untagged} [<vlan_name>] | <vlan_tag>]]}
Description
Creates a local netlogin user name and password.
Syntax Description
Default
N/A.
Usage Guidelines
Use this command to create a local network login account and to configure the switch to use its local
database for network login authentication. This method of authentication is useful in the following
situations:
●
If both the primary and secondary (if configured) RADIUS servers timeout or are unable to respond
to authentication requests.
●
If no RADIUS servers are configured.
●
If the RADIUS server used for network login authentication is disabled.
If any of the above conditions are met, the switch checks for a local user account and attempts to
authenticate against that local account.
Extreme Networks recommends creating a maximum of 64 local accounts. If you need more than 64
local accounts, Extreme Networks recommends using RADIUS for authentication. For more information
about RADIUS authentication, see the
ExtremeWare XOS Concepts Guide
.
Beginning with ExtremeWare XOS 11.3 you can also specify the destination VLAN to enter upon a
successful authentication.
Additional Requirements.
This command applies only to the web-based and MAC-based modes of
network login. 802.1x network login does not support local database authentication.
user-name
Specifies a new local netlogin user name. User names must have a minimum
of 1 character and a maximum of 32 characters.
encrypted
The encrypted option is used by the switch to encrypt the password. Do not
use this option through the command line interface (CLI).
password
Specifies a local netlogin user password. Passwords must have a minimum of 0
characters and a maximum of 32 characters.
tagged
Specifies that the client be added as tagged.
untagged
Specifies that the client be added as untagged.
vlan_name
Specifies the name of the destination VLAN.
vlan_tag
Specifies the VLAN ID, tag, of the destination VLAN.