D-Link DXS-5000-54S Emulator - Page 63

5000 Series Layer 2/3 Managed Data Center Switch CLI Reference Guide used to name the list. The list of methods that the authentication algorithm tries is tried in the sequence in which they are identified in the method argument. If no password is configured, the user manager returns ERROR (not PASS or FAIL) for the enable and line methods, and then moves on to the next configured method in the authentication list. If the method none is used, it indicates that no authentication is needed. A prompt will only appear asking the user for an enable password if one is required. The authentication methods that follow do not require passwords: 1. none 2. deny 3. enable (When no enable password is configured) 4. line (When no line password is configured) Example Please consider the examples below. a. aaa authentication enable default enable none b. aaa authentication enable default line none c. aaa authentication enable default enable radius none d. aaa authentication enable default line tacacs none Examples a and b do not result in a prompt for a password; however, because they contain the RADIUS and TACACS+ methods, respectively, examples c and d do cause the password prompt to be displayed. lf only enable is included as a login method, and if no enable password is configured, then D-LINK OS does not produce a prompt for a username. In such cases, D-LINK OS only produces a prompt for a password. D-LINK OS supports the configuring of methods after the local method is tried in the authentication and authorization lists. The next configured method is tried only if the user is not present in the local database. Only if the previous method returns an error are the additional methods of authentication used (that is, they are not used it if simply fails). If the user wishes to ensure that the authentication succeeds even if an error is returned by all the methods, the user should specify none as the final method in the command line. Note: Requests sent to a RADIUS server by the switch include the username $enabx$, where x indicates the requested privilege level. In order to ensure that enable is authenticated on RADIUS servers, the user should add $enabx$ users to them. By doing so, the login user ID will now be sent to TACACS+ servers for enable authentication. The no command is used to return to the default configuration. aaa authentication enable {default | list-name} method1 [method2...] no aaa authentication enable {default | list-name} Parameters default list-name method1...[method2...] Indicates that the listed authentication methods that follow this argument are used as the default list of methods when higher privilege levels are used. Indicates the string of characters of up to 15 characters in length that is used to name the list of authentication methods that are activated when accessing higher privilege levels. Indicates that at least one of the following methods will be used: 57