Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.7 - Page 991

User Guidelines The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line. If none is specified as an authentication method after radius, no authentication is used if the RADIUS server is down. When using a Cisco ACS with TACACS+ as the authentication method for HTTPS, the Cisco ACS must be configured to allow the shell service. In addition, for admin privileges, the privilege level attribute must be set to 15. Example The following example configures HTTPS authentication. console(config)# ip https authentication radius local mab Use the mab command to configure the switch to enable MAC Authentication Bypass (MAB) authentication for devices connected to the interface. Use the no form of this command to disable MAB on an interface. Syntax mab [auth-type {pap | eap-md5|chap}] no mab • chap-Authenticate MAB clients using Challenge Authentication Protocol (CHAP) • eap-Authenticate MAB clients using Extensible Authentication Protocol (EAP) • pap-Authenticate MAB clients using Password Authentication Protocol (PAP) Default Configuration By default, MAB clients are authenticated using the EAP method. Command Mode Interface (Ethernet) Configuration mode Security Commands 991