D-Link DXS-3400 Emulator - Page 110

DXS-3400 Series Lite Layer 3 Stackable 10GbE Managed Switch CLI Reference Guide 8-9 aaa authentication login This command is used to configure the method list used for login authentication. Use the no form of this command to remove a login method list. aaa authentication login {default | LIST-NAME} METHOD1 [METHOD2...] no aaa authentication login {default | LIST-NAME} Parameters default LIST-NAME METHOD1 [METHOD2...] Specifies to configure the default method list for login authentication. Specifies the name of the method list other than the default method list. This name can be up to 32 characters long. Specifies the list of methods that the authentication algorithm tries in the given sequence. Enter at least one method or enter up to four methods. The following are keywords that can be used to specify a method. local - Specifies to use the local database for authentication. group radius - Specifies to use the servers defined by the RADIUS server host command. group tacacs+ - Specifies to use the servers defined by the TACACS+ server host command. group GROUP-NAME - Specifies to use the server groups defined by the AAA group server command. none - Normally, the method is listed as the last method. The user will pass authentication if it is not denied by previous method's authentication. Default No AAA authentication method list is configured. Command Mode Global Configuration Mode. Command Default Level Level: 15. Usage Guideline Use this command to configure the authentication method list used for login authentication. Multiple method lists can be configured. The default keyword is used to define the default method list. If authentication uses the default method list but the default method list does not exist, then the authentication will be performed via the local database. The login authentication authenticates the login user name and password, and also assigns the privilege level to the user based on the database. A method list is a sequential list describing the authentication methods to be queried in order to authenticate a user. Method lists enable you to designate one or more security protocols to be used for authentication, thus ensuring a backup system for authentication in case the initial method fails. The switch system uses the first listed method to authenticate users. If that method fails to respond, the switch system selects the next authentication method listed in the method list. This process continues until there is successful communication with a listed authentication method or all methods defined in the method list are exhausted. It is important to note that the switch system attempts authentication with the next listed authentication method only when there is no response from the previous method. If authentication fails at any point in this cycle, meaning that the security server or local username database responds by denying the user access, the authentication process stops and no other authentication methods are attempted. 106