D-Link DXS-3600-EM-4QXS CLI Guide - Page 58

DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to define an AAA enable authentication method list. In the authentication method list, the RADIUS security server is used first for authentication. If the RADIUS security server does not respond, the local user database is used for authentication. After enabling the authentication method list defined, AAA security services will apply authentication to the user by enabling the privilege password. DXS-3600-32S(config)#aaa DXS-3600-32S(config)#aaa authentication enable default group radius local DXS-3600-32S(config)# 6-4 login authentication This command is used to apply the login authentication method list to the specified terminal lines. The no form of this command is used to remove the application of login authentication method list. login authentication {default | list-name} no login authentication Parameters default list-name Apply the default Login authentication method list to the terminal line. Apply the defined Login authentication method list to the terminal line. Default Command Mode Command Default Level Usage Guideline Uses the default set with the 'aaa authentication login' command. Line Configuration Mode. Level: 15 Once the default login authentication method list has been configured, it will be applied to all the terminals automatically. If non-default login authentication method list has been applied to the terminal, it will replace the default one. If you attempt to apply the undefined method list, it will prompt a warning message that the login authentication in this line is ineffective till it is defined. Example This example shows how to define the AAA login authentication method list, named 'list-1'. In the authentication method list, the local user database is used first for authentication. After that, this method list is applied to the console. After applying the login method list, called 'list-1', to the console, a user login from the console will be authentication by the AAA security servers. DXS-3600-32S#configure terminal DXS-3600-32S(config)#aaa authentication login list-1 local DXS-3600-32S(config)#line console DXS-3600-32S(config-line)#login authentication list-1 DXS-3600-32S(config-line)# 6-5 aaa authorization exec This command is used to authorize the users logged in the NAS CLI and assign the authority level. The no form of this command is used to disable the aaa authorization exec function. aaa authorization exec {default | list-name} method1 [method2...] no aaa authorization exec {default | list-name} 50