Home » Dell Manuals » Servers » Dell PowerEdge FX2 » Manual Viewer

Dell PowerEdge FX2 Dell PowerEdge FN I/O Aggregator Command Line Reference Gui - Page 215

Authentication and Password Commands, aaa authentication enable, method

Add to My Manuals
Save this manual to your list of manuals

Page 215 highlights

Authentication and Password Commands This section contains the commands that control the management access to the system. aaa authentication enable Configure AAA Authentication method lists for user access to EXEC privilege mode (the "Enable" access). Syntax aaa authentication enable {default | method-list-name} method [... method2] To return to the default setting, use the no aaa authentication enable {default | method-list-name} method [... method2] command. Parameters Defaults Command Modes Command History Usage Information default method-listname method Enter the keyword default then the authentication methods to use as the default sequence of methods for the Enable login. The default is default enable. Enter a text string (up to 16 characters long) to name the list of enabled authentication methods activated at login. Enter one of the following methods: • enable: use the password the enable password command defines in CONFIGURATION mode. • line: use the password the password command defines in LINE mode. • none: no authentication. • radius: use the RADIUS servers configured with the radius-server host command. • tacacs+: use the TACACS+ server(s) configured with the tacacs-server host command. ... method2 (OPTIONAL) In the event of a "no response" from the first method, Dell Networking Operating System (OS) applies the next configured method. Use the enable password. CONFIGURATION Version 9.4(0.0) Supported on the FN I/O aggregator. By default, the Enable password is used. If you configure aaa authentication enable default, Dell Networking Operating System (OS) uses the methods defined for Enable access instead. Methods configured with the aaa authentication enable command are evaluated in the order they are configured. If authentication fails using the primary method, Dell Networking Operating System (OS) employs the second method (or third method, if necessary) automatically. For example, if the TACACS+ server is 215

Section	Page
Dell PowerEdge FN I/O Aggregator Command Line Reference Guide 9.6.(0.0)	3
About this Guide	17
Objectives	17
Audience	18
Conventions	18
Before You Start	19
IOA Operational Modes	19
Default Settings	20
Other Auto-Configured Settings	20
DCB Support	21
FCoE Connectivity	21
iSCSI Operation	21
Link Aggregation	22
Link Tracking	22
VLANs	22
Where to Go From Here	23
CLI Basics	24
Accessing the Command Line	24
Multiple Configuration Users	24
Navigating the CLI	25
Obtaining Help	26
Using the Keyword no Command	27
Filtering show Commands	27
Command Modes	28
File Management	31
boot system gateway	31
boot system stack-unit	31
cd	32
copy	32
copy running-config startup-config	34
delete	34
dir	35
format flash	35
[no] logging coredump stack-unit	36
pwd	36
rename	37
restore factory-defaults	37
show boot system	39
show file	40
show file-systems	40
show os-version	41
show running-config	42
show version	44
upgrade boot	45
upgrade system	46
Control and Monitoring	48
asset-tag	48
clear alarms	48
clear command history	49
configure	49
debug cpu-traffic-stats	49
debug ifm trace-flags	50
disable	51
enable	51
end	52
exit	52
ftp-server enable	52
ftp-server topdir	53
ftp-server username	54
hostname	54
ip telnet server enable	55
ip telnet source-interface	55
line	56
ping	56
reload	57
service timestamps	57
show alarms	58
show command-history	59
show configuration lock	60
show cpu-traffic-stats	61
show debugging	62
show diag	62
show environment	63
show inventory	64
show memory	65
show processes cpu	66
show processes ipc flow-control	68
show processes memory	69
show revision	72
show server-interfaces	72
show system	73
show tech-support	75
show uplink brief	78
show util-threshold cpu	80
show util-threshold memory	80
ssh-peer-stack-unit	81
telnet	81
telnet-peer-stack-unit	82
terminal length	82
terminal monitor	83
terminal xml	83
trace route	84
undebug all	85
write	85
u-Boot	86
boot change	86
boot show net config retries	86
boot write net config retries	87
boot zero	87
default gateway	87
enable	88
help	88
ignore enable password	89
ignore startup-config	89
interface management ethernet ip address	89
[no] default gateway	89
no interface management ethernet ip address	90
reload	90
show boot blc	90
show boot selection	91
show bootflash	91
show bootvar	92
show default gateway	92
show interface management ethernet	93
show interface management port config	93
syntax help	94
Data Center Bridging (DCB)	95
clear dcbx counters	95
clear ets counters	96
clear pfc counters	96
dcb enable auto-detect on-next-reload	97
dcbx version	100
show dcb	101
show interface dcbx detail	101
show interface ets	104
show interface pfc	107
show interface pfc statistics	110
show qos dcb-map	110
Dynamic Host Configuration Protocol	112
clear ip dhcp client statistics	112
debug ip dhcp client events	113
debug ip dhcp client packets	113
ip address dhcp	114
release dhcp interface	114
renew dhcp interface	115
show ip dhcp client statistics	116
show ip dhcp lease	116
FIP Snooping	118
clear fip-snooping statistics	118
debug fip-snooping	118
show fip-snooping config	120
show fip-snooping enode	120
show fip-snooping fcf	121
show fip-snooping sessions	122
show fip-snooping statistics	123
show fip-snooping system	126
show fip-snooping vlan	126
HTTP Copy via CLI	128
copy http	128
Internet Group Management Protocol (IGMP)	129
IGMP Commands	129
clear ip igmp groups	129
debug ip igmp	130
ip igmp snooping flood	130
show ip igmp groups	131
show ip igmp interface	132
show ip igmp snooping mrouter	133
Interfaces	134
Port Interface Commands	134
Port Channel Commands	135
Time Domain Reflectometer (TDR) Commands	135
Virtual LAN (VLAN) Commands	135
auto vlan	136
clear counters	136
clear mac-address-table dynamic	137
default vlan-id	137
description	138
interface range	139
interface vlan	140
monitor interface	141
stack-unit port-group port mode ethernet	143
name	144
negotiation auto	145
show config (INTERFACE mode)	146
show config (from INTERFACE RANGE mode)	146
show config (from INTERFACE VLAN mode)	147
show config (from PROTOCOL LLDP mode)	147
show interfaces	148
show interfaces configured	151
show interfaces description	152
show interfaces port-channel	153
show interfaces stack-unit	156
show interfaces status	157
show interfaces switchport	158
show tdr	159
show vlan	160
shutdown	162
speed (for 1000/10000 interfaces)	163
tdr-cable-test	163
vlan tagged (CMC)	164
vlan untagged (CMC)	165
IPv4 Routing	167
clear tcp statistics	167
debug ip dhcp	167
debug ip icmp	168
ip route	169
management route	170
show arp	171
show ip interface	173
show ip management-route	175
show ip multicast-cam stack-unit	175
show ip route	177
show tcp statistics	179
iSCSI Optimization	182
show iscsi	182
show iscsi sessions	183
show iscsi sessions detailed	183
Isolated Networks	185
io-aggregator isolated-network vlan	185
show io-aggregator isolated-networks	185
Link Aggregation Control Protocol (LACP)	187
auto-lag enable	187
clear lacp counters	187
debug lacp	188
io-aggregator auto-lag enable	189
show io-aggregator auto-lag status	189
show lacp	190
show port-channel-flow	191
show link-bundle-distribution port-channel	192
Layer 2	194
MAC Addressing Commands	194
Virtual LAN (VLAN) Commands	194
clear mac-address-table dynamic	194
description	195
show cam mac stack-unit	195
Link Layer Discovery Protocol (LLDP)	197
clear lldp counters	197
debug lldp interface	198
protocol lldp (Configuration)	199
protocol lldp (Interface)	199
show lldp neighbors	199
show lldp statistics	200
Port Monitoring	202
description	203
monitor session	203
show config	204
show monitor session	204
show running-config monitor session	205
source (port monitoring)	206
Quality of Service (QoS)	207
Policy-Based QoS Commands	207
show qos dcb-map	207
show qos dot1p-queue-mapping	208
Security	209
AAA Accounting Commands	209
aaa accounting	209
aaa accounting suppress	210
accounting	211
aaa authorization commands	211
aaa authorization config-commands	212
aaa authorization exec	213
show accounting	214
Authentication and Password Commands	215
aaa authentication enable	215
aaa authentication login	216
banner exec	217
banner login	218
debug radius	219
debug tacacs+	220
exec-banner	220
ip radius source-interface	220
ip tacacs source-interface	221
login authentication	221
RADIUS Commands	222
radius-server deadtime	222
radius-server host	223
radius-server retransmit	224
radius-server timeout	225
radius-server key	225
show privilege	226
Suppressing AAA Accounting for Null Username Sessions	226
TACACS+ Commands	226
tacacs-server host	227
tacacs-server key	227
TACACS+ Accounting	228
timeout login response	229
SSH Server and SCP Commands	230
enable password	230
enable restricted	231
service password-encryption	232
show ip ssh	232
show ip ssh client-pub-keys	233
show ip ssh rsa-authentication	233
show users	234
ssh	235
username	235
Simple Network Management Protocol (SNMP) and Syslog	237
SNMP Commands	237
Syslog Commands	237
clear logging	238
logging buffered	238
logging console	239
logging hostname	240
logging monitor	240
logging source-interface	241
show logging	241
show snmp	243
show snmp engineID	244
show snmp group	245
show snmp user	245
snmp-server community	246
terminal monitor	246
Storm Control	247
io-aggregator broadcast storm-control	247
show io-aggregator broadcast storm-control status	247
Stacking Commands	249
power-cycle stack-unit	249
reset stack-unit	250
show system stack-ports	251
stack-unit iom-mode	253
show system stack-unit iom-mode	253
show system stack-unit stack-group	254
stack-unit priority	255
stack-unit renumber	256
System Time	257
ntp server	257
show clock	258
clock set	258
clock summer-time date	259
clock summer-time recurring	260
clock timezone	262
Uplink Failure Detection (UFD)	263
defer-timer	263
enable	263
Virtual Link Trunking (VLT)	265
show vlt backup-link	265
show vlt brief	266
show vlt detail	266
show vlt role	267
show vlt statistics	267
stack-unit iom-mode	268
Debugging and Diagnostics	270
Offline Diagnostic Commands	270
Hardware Commands	270
clear hardware stack-unit	271
diag stack-unit	271
offline stack-unit	273
show diag	273
show hardware stack-unit	277
show hardware system-flow	283
NPIV Proxy Gateway	288
show fcoe-map	288
show fc sw	290
show npiv devices	291
show running-config fcoe-map	294
PMUX Mode of the I/O Aggregator	295
Data Center Bridging (DCB)	295
advertise dcbx-appln-tlv	295
advertise dcbx-tlv	296
clear dcbx counters	296
clear ets counters	297
clear pfc counters	297
dcb-enable	297
dcb enable pfc-queues	298
dcb-map	298
dcb-map stack-unit all stack-ports all	299
dcbx port-role	300
dcbx version	300
debug dcbx	301
fcoe-map	302
fcoe priority-bits	303
iscsi priority-bits	303
priority-group bandwidth pfc	304
priority-pgid	305
show dcb	306
show interface dcbx detail	307
show interface ets	310
show interface pfc	313
show interface pfc statistics	316
show qos dcb-map	317
show stack-unit stack-ports ets details	318
show stack-unit stack-ports pfc details	319
Dynamic Host Configuration Protocol	319
clear ip dhcp client statistics	320
debug ip dhcp client	320
ip address dhcp	321
show ip dhcp client statistics	321
show ip dhcp lease	321
File Management	322
boot system gateway	322
boot system stack-unit	322
cd	323
copy	323
copy running-config startup-config	325
delete	325
dir	326
format flash	326
[no] logging coredump stack-unit	327
pwd	327
rename	328
restore factory-defaults	328
show boot system	330
show file	330
show file-systems	331
show os-version	332
show running-config	333
show version	334
upgrade boot	335
upgrade system	336
FIP Snooping	338
clear fip-snooping statistics	338
feature fip-snooping	338
fip-snooping enable	339
fip-snooping fc-map	339
fip-snooping port-mode fcf	339
iSCSI Optimization	340
advertise dcbx-app-tlv	340
iscsi aging time	340
iscsi cos	341
iscsi enable	342
iscsi priority-bits	342
iscsi profile-compellent	342
iscsi target port	343
Interfaces	343
Basic Interface Commands	344
clear counters	344
description	344
feature fc	345
flowcontrol	345
interface	347
interface ManagementEthernet	348
interface range	349
interface vlan	351
intf-type cr4 autoneg	351
keepalive	352
mtu	352
stack-unit port-group port mode ethernet	354
negotiation auto	354
portmode hybrid	356
Port Channel Commands	358
channel-member	358
interface port-channel	359
minimum-links	360
Internet Group Management Protocol (IGMP)	361
IGMP Commands	361
IGMP Snooping Commands	363
IPv4 Routing	366
ip route	366
show ip route	367
Layer 2	369
MAC Addressing Commands	369
mac-address-table aging-time	369
mac-address-table static	369
mac-address-table station-move refresh-arp	370
show mac-address-table	370
Link Aggregation Control Protocol (LACP)	373
lacp long-timeout	373
lacp port-priority	374
port-channel mode	374
port-channel-protocol lacp	375
Link Layer Discovery Protocol (LLDP)	375
advertise dot3-tlv	376
advertise management-tlv	376
clear lldp counters	377
clear lldp neighbors	377
debug lldp interface	378
disable	379
hello	379
multiplier	379
NPIV Proxy Gateway	380
dcb-map	380
description (for FCoE maps)	381
feature fc	381
fabric-id vlan	382
fc-map	382
fcoe-map	383
fcf-priority	384
fka-adv-period	385
keepalive	386
show fcoe-map	386
show fc sw	389
show npiv devices	389
show interfaces status	392
show qos dcb-map	393
Quality of Service (QoS)	394
Per-Port QoS Commands	394
dot1p-priority	394
service-class dynamic dot1p	395
service-class dot1p-mapping	396
service-class bandwidth-percentage	397
Policy-Based QoS Commands	397
bandwidth-percentage	397
description	398
policy-aggregate	398
policy-map-output	399
qos-policy-output	400
rate-shape	400
service-policy output	401
service-queue	401
show qos qos-policy-output	402
trust	403
Security	404
AAA Accounting Commands	404
Authentication and Password Commands	407
RADIUS Commands	414
Stacking Commands	418
Suppressing AAA Accounting for Null Username Sessions	425
TACACS+ Commands	426
SSH Server and SCP Commands	428
Simple Network Management Protocol (SNMP) and Syslog	434

Match case Limit results 1 per page

Authentication and Password Commands

This section contains the commands that control the management access to the system.

aaa authentication enable

Configure AAA Authentication method lists for user access to EXEC privilege mode (the “Enable” access).

Syntax

aaa authentication enable {default |

method-list-name

}

method

[

... method2

]

To return to the default setting, use the

no aaa authentication enable

{default |

method-list-name

}

method

[

... method2

]

command.

Parameters

default

Enter the keyword

default

then the authentication

methods to use as the default sequence of methods for the

Enable login. The default is

default enable

method-list-

name

Enter a text string (up to 16 characters long) to name the list

of enabled authentication methods activated at login.

method

Enter one of the following methods:

•

enable

: use the password the

enable password

command defines in CONFIGURATION mode.

•

line

: use the password the

password

command defines

in LINE mode.

•

none

: no authentication.

•

radius

: use the RADIUS servers configured with the

radius-server host

command.

•

tacacs+

: use the TACACS+ server(s) configured with the

tacacs-server host

command.

... method2

(OPTIONAL) In the event of a “no response” from the first

method, Dell Networking Operating System (OS) applies the

next configured method.

Defaults

Use the

enable

password.

Command

Modes

CONFIGURATION

Command

History

Version 9.4(0.0)

Supported on the FN I/O aggregator.

Usage

Information

By default, the

Enable password

is used. If you configure

aaa authentication

enable default

, Dell Networking Operating System (OS) uses the methods

defined for

Enable access

instead.

Methods configured with the

aaa authentication enable

command are

evaluated in the order they are configured. If authentication fails using the primary

method, Dell Networking Operating System (OS) employs the second method (or

third method, if necessary) automatically. For example, if the TACACS+ server is

215