D-Link DXS-3600-EM-8T CLI Guide - Page 64

DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide 6-13 aaa authentication network This command is used to enable AAA network access authentication and configure the network access user authentication method list. The no form of this command is used to delete the network access user authentication method list. aaa authentication network default method1 [method2...] no aaa authentication network default Parameters default method When this parameter is used, the following defined network access user authentication method list is used as the default method for user authentication. Syntax "{local | none | group radius | group_name}". Up to four methods supported: local - Specifies to use the local user name database for authentication. none - Specifies to bypass authentication. group - Specifies to be followed by radius or a group name. "group radius" means to use all RADIUS servers group. "group group_name" means to use a specific RADIUS group, created by means of the aaa group server radius global configuration command. Default Command Mode Command Default Level Usage Guideline None. Global Configuration Mode. Level: 15 If the AAA network access security service (such as 802.1X) is enabled on the device, users must use AAA for network access user authentication negotiation. You must use the 'aaa authentication network' command to configure a default or optional method list for network access user authentication. The next method can be used for authentication only when the current method does not work. Example This example shows how to define the AAA authentication method list for the network access security service. In the authentication method list, the RADIUS security server is first used for authentication. If the RADIUS security server does not respond, the local user database is used for authentication. DXS-3600-32S#configure terminal DXS-3600-32S(config)#aaa authentication network default group radius local DXS-3600-32S(config)# 6-14 aaa authorization network This command is used to authorize the service requests (including protocols like 802.1X) from the users that access the network. The no form of this command is used to disable the authorization function. aaa authorization network default method1 [method2...] no aaa authorization network default Parameters default When this parameter is used, the following defined method list is used as the default method for Network authorization. 56