D-Link DXS-5000-54S Emulator - Page 62

5000 Series Layer 2/3 Managed Data Center Switch CLI Reference Guide Command Mode Global Config Example The following is an example of the command. (Routing)# (Routing)#configure (Routing)(config)#aaa accounting commands default stop-only tacacs (Routing)(config)#aaa accounting exec default start-stop radius (Routing)(config)#aaa accounting dot1x default start-stop radius (Routing)(config)#aaa accounting dot1x default none (Routing)(config)#exit The administrator can change the record type, or the methods list, for the same set of accounting type and list name without being required to first delete the previous configuration. (Routing)# (Routing)#configure (Routing)(config)#aaa accounting exec ExecList stop-only tacacs (Routing)(config)#aaa accounting exec ExecList start-stop tacacs (Routing)(config)#aaa accounting exec ExecList start-stop tacacs radius In the example above, the first aaa command causes method list for exec sessions with the name ExecList to be created, with the record-type being stop-only and the method being TACACS+. The second command causes the record type to be changed to start-stop from stop-only for the same method list. The third command, used for the same list, causes the methods list to be changed to {tacacs,radius} from {tacacs}. The following is another example of the command. (Routing)# (Routing)#configure (Routing)(config)#aaa accounting commands userCmdAudit stop-only tacacs radius (Routing)(config)#no aaa accounting commands userCmdAudit (Routing)(config)#exit 4-54 aaa authentication commands aaa authentication enable This command is used to set authentication to allow the accessing of higher privilege levels. The enableList is the default enable list. This default list is used by the console and contains the method as "enable" followed by none. For Telnet and SSH users, a different default enable list, enableNetList, is used (that is, instead of enableList). This alternative list is applied for Telnet and SSH by default and contains "enable" followed by the deny methods. In D-LINK OS, the enable password is, by default, not configured. This means that, by default, users of Telnet and SSH will not get access to the Privileged EXEC mode. On the other hand, under the default conditions, a console user will always enter the Privileged EXEC mode without needing to enter the enable password. When using the enable authentication command, the default and optional list names created with the aaa authentication enable command are used. The user can create a list by entering the aaa authentication enable list-name method command, where the list-name is any string of characters 56