D-Link DXS-5000-54S Emulator - Page 64

5000 Series Layer 2/3 Managed Data Center Switch CLI Reference Guide • deny: This method is used to deny access. • enable: The enable password is used for authentication. • line: The line password is used for authentication. • none: No authentication is used. • radius: The list of all RADIUS servers is used for authentication. • tacacs: The list of all TACACS+ servers is used for authentication. Default This default is default. Command Mode Global Config Example The following example sets authentication when a user is accessing higher privilege levels. (switch)(config)# aaa authentication enable default enable aaa authentication login This command is used to set authentication at login. The default and optional list names created with the aaa authentication login command can be used with the command initially. The user can create a list by entering the aaa authentication login list-name method command, where the list-name is any string of characters used to name the list. The list of methods that the authentication algorithm tries is tried in the sequence in which they are identified in the method argument. Each successive method of authentication in the list is only used if the previous method returns an error, not in the event that there is an authentication failure. If the user wishes to ensure that the authentication succeeds even if an error is returned by all the methods, the user should specify none as the final method in the command line. For example, if none is specifically indicated as an authentication method after radius, then no authentication is used in the event that the RADIUS server is down. The no command is used to return to the default setting. aaa authentication login {default | list-name} method1 [method2...] no aaa authentication login {default | list-name} Parameters default list-name method1...[method2...] The default Authentication List. For telnet/SSH, the default list is 'networkList'. Indicates the string of characters of up to 15 characters in length that is used to name the list of authentication methods that are activated when a user logs in. Indicates that at least one of the following methods will be used: • enable: The enable password is used for authentication. • line: The line password is used for authentication. 58