Home » Dell Manuals » Servers » Dell PowerEdge M520 » Manual Viewer

Dell PowerEdge M520 Dell PowerConnect M6220/M6348/M8024/M8024-k CLI Referen - Page 197

Vendor-Specific Option, User Access Control

View all Dell PowerEdge M520 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 197 highlights

User Access Control In addition to authenticating a user, the CLI also assigns the user access to one of two security levels. Level 1 has read-only access. This level allow the user to read information but not configure the switch. The access to this level cannot be modified. Level 15 is the special access level assigned to the superuser of the switch. This level has full access to all functions within the switch and can not be modified. If the user account is created and maintained locally, each user is given an access level at the time of account creation. If the user is authenticated through remote authentication servers, the authentication server is configured to pass the user access level to the CLI when the user is authenticated. When Radius is used, the Vendor-Specific Option field returns the access level for the user. Two vendor specific options are supported. These are CISCO-AV-Pairs(Shell:priv-lvl=x) and Dell Radius VSA (user-group=x). TACACS+ provides the appropriate level of access. The following rules and specifications apply: • The user determines whether remote authentication servers or locally defined user authentication accounts are used. • If authentication servers are used, the user can identify at least two remote servers (the user may choose to configure only one server) and what protocol to use with the server, TACACS+ or Radius. One of the servers is primary and the other is the secondary server (the user is not required to specify a secondary server). If the primary server fails to respond in a configurable time period, the CLI automatically attempts to authenticate the user with the secondary server. • The user is able to specify what happens when both primary and secondary servers fail to respond. In this case, the user is able to indicate that the CLI should either use the local user accounts or reject all requests. • Even if the user configures the CLI to fail login when the remote authentication servers are down, the CLI allows the user to log in to the serial interface authenticated by locally managed account data. Using the CLI 197

Section	Page
Command Groups	73
Introduction	73
Command Groups	74
Mode Types	77
Layer 2 Commands	79
AAA	79
ACL	80
Address Table	81
Auto-VoIP	82
CDP Interoperability	83
Data Center Bridging	84
DHCP l2 Relay	84
DHCP Management Interface	84
DHCP Snooping	85
Dynamic ARP Inspection	86
Email Alerting	87
Ethernet Configuration	88
Ethernet CFM	90
GVRP	91
IGMP Snooping	91
IGMP Snooping Querier	92
IP Addressing	93
IPv6 ACL	94
IPv6 MLD Snooping	94
IPv6 MLD Snooping Querier	95
IP Source Guard	96
iSCSI Optimization	97
Link Dependency	97
LLDP	98
Multicast VLAN Registration	98
Port Channel	99
Port Aggregator	100
Port Monitor	101
QoS	101
Radius	105
Spanning Tree	107
TACACS+	109
VLAN	109
802.1x	111
Layer 3 Commands	113
ARP (IPv4)	113
DHCP Server and Relay Agent (IPv4)	114
DHCPv6	116
DVMRP	117
GMRP	117
IGMP	118
IGMP Proxy	119
IP Helper/DHCP Relay	119
IP Routing	121
IPv6 Multicast	122
IPv6 Routing	123
Loopback Interface	126
Multicast	126
OSPF	129
OSPFv3	133
Router Discovery Protocol	136
Routing Information Protocol	137
Tunnel Interface	138
Virtual Router Redundancy	139
Utility Commands	140
Auto-Install	140
Captive Portal	141
CLI Macro	143
Clock	144
Command Line Configuration Scripting	145
Denial of Service	146
Line	147
Management ACL	147
Mode	148
Password Management	148
PHY Diagnostics	149
RMON	150
SDM Templates	150
Serviceability Tracing	150
sFlow	152
SNMP	153
SSH	154
Syslog	155
System Management	155
Telnet Server	158
Terminal Length	159
Time Ranges	159
User Interface	159
Web Server	160
Using the CLI	163
Introduction	163
Entering and Editing CLI Commands	163
History Buffer	164
Negating Commands	165
Show Command	165
Command Completion	165
Short Form Commands	166
Keyboard Shortcuts	166
Operating on Multiple Objects (Range)	167
Command Scripting	169
CLI Command Notation Conventions	169
Interface Naming Conventions	169
Examples	171
CLI Command Modes	172
User EXEC Mode	173
Privileged EXEC Mode	173
Global Configuration Mode	174
Interface and Other Specific Configuration Modes	174
Identifying the Switch and Command Mode from the System Prompt	176
Navigating CLI Command Modes	177
Starting the CLI	185
Easy Setup Wizard	186
Using CLI Functions and Tools	193
Configuration Management	193
Management Interface Security	195
Management ACL	199
Other CLI Tools and Capabilities	199
Layer 2 Commands	215
AAA Commands	217
Commands in this Chapter	218
aaa authentication dot1x default	218
Syntax	218
Parameter Description	219
Default Configuration	219
Command Mode	219
User Guidelines	219
Example	219
aaa authentication enable	220
Syntax	220
Default Configuration	220
Command Mode	220
User Guidelines	220
Example	221
aaa authentication login	221
Syntax	221
Default Configuration	222
Command Mode	222
User Guidelines	222
Example	223
aaa authorization network default radius	223
Syntax	223
Default Configuration	223
Command Mode	223
User Guidelines	223
Example	223
aaa ias-user username	224
Syntax	224
Parameter Description	224
Default Configuration	224
Command Mode	224
User Guidelines	224
Examples	224
clear (IAS)	225
Syntax	225
Parameter Description	225
Default Configuration	225
Command Mode	225
User Guidelines	225
Example	225
enable authentication	225
Syntax	225
Default Configuration	226
Command Mode	226
User Guidelines	226
Example	226
enable password	226
Syntax	226
Default Configuration	226
Command Mode	227
User Guidelines	227
Example	227
ip http authentication	227
Syntax	227
Default Configuration	227
Command Mode	228
User Guidelines	228
Example	228
ip https authentication	228
Syntax	228
Parameter Description	228
Default Configuration	229
Command Mode	229
User Guidelines	229
Example	229
login authentication	229
Syntax	229
Default Configuration	229
Command Mode	230
User Guidelines	230
Example	230
password (aaa IAS User Configuration)	230
Syntax	230
Parameter Description	230
Default Configuration	230
Command Mode	230
User Guidelines	231
Example	231
password (Line Configuration)	231
Syntax	231
Default Configuration	232
Command Mode	232
User Guidelines	232
Example	232
password (User EXEC)	232
Syntax	232
Parameter Description	232
Default Configuration	232
Command Mode	232
User Guidelines	233
Example	233
show aaa ias-users	233
Syntax	233
Parameter Description	233
Default Behavior	233
Command Mode	233
User Guidelines	233
Example	234
show authentication methods	234
Syntax	234
Default Configuration	234
Command Mode	234
User Guidelines	234
Example	235
show users accounts	235
Syntax	236
Parameter Description	236
Default Configuration	236
Command Mode	236
User Guidelines	236
Example	236
show users login-history	237
Syntax	237
Default Configuration	237
Command Mode	237
User Guidelines	237
Example	237
username	238
Syntax	238
Parameter Description	238
Default Configuration	239
Command Mode	239
User Guidelines	239
Example	239
username password encrypted	239
Syntax	240
Parameter Description	240
Default Behavior	240
Command Modes	240
User Guidelines	240
Examples	241
username unlock	241
Syntax	242
Parameter Description	242
Default Configuration	242
Command Mode	242
User Guidelines	242
ACL Commands	243
ACL Logging	243
Commands in this Chapter	244
access-list	244
Parameter Description	245
Default Configuration	246
Command Mode	246
User Guidelines	246
Examples	246
deny \| permit (IP ACL)	246
Syntax	247
Parameter Description	247
Default Configuration	247
Command Mode	247
User Guidelines	247
deny \| permit (Mac-Access-List-Configuration)	247
Syntax	248
Parameter Description	248
Default Configuration	249
Command Mode	249
User Guidelines	249
Example	250
ip access-group	250
Syntax	250
Default Configuration	250
Command Mode	250
User Guidelines	251
Examples	251
mac access-group	251
Syntax	251
Default Configuration	251
Command Mode	251
User Guidelines	252
Example	252
mac access-list extended	252
Syntax	252
Default Configuration	252
Command Mode	252
User Guidelines	253
Example	253
mac access-list extended rename	253
Syntax	253
Default Configuration	253
Command Mode	253
User Guidelines	253
Example	253
service-acl input	254
Syntax	254
Parameter Description	254
Default Configuration	254
Command Mode	254
User Guidelines	255
show service-acl interface	255
Syntax	255
Parameter Description	255
Default Configuration	255
Command Mode	255
User Guidelines	255
Example	255
show ip access-lists	256
Syntax	256
Parameter Description	256
Examples	256
show mac access-list	257
Syntax	257
Parameter Description	257
Default Configuration	257
Command Mode	257
User Guidelines	257
Example	257
Address Table Commands	259
Commands in this Chapter	259
clear mac address-table	260
Syntax	260
Parameter Description	260
Default Configuration	261
Command Mode	261
User Guidelines	261
Example	261
mac address-table aging-time	261
Syntax	261
Parameter Description	261
Default Configuration	261
Command Mode	262
User Guidelines	262
Example	262
mac address-table multicast filtering	262
Syntax	262
Parameter Description	262
Default Configuration	262
Command Mode	262
User Guidelines	262
Example	263
mac address-table multicast forbidden address	263
Syntax	263
Parameter Description	263
Default Configuration	264
Command Mode	264
User Guidelines	264
Examples	264
mac address-table multicast forbidden forward- unregistered	264
Syntax	264
Parameter Description	265
Default Configuration	265
Command Mode	265
User Guidelines	265
Example	265
mac address-table multicast forward-all	265
Syntax	265
Parameter Description	265
Default Configuration	266
Command Mode	266
User Guidelines	266
Example	266
mac address-table multicast forward- unregistered	266
Syntax	266
Parameter Description	266
Default Configuration	266
Command Mode	266
User Guidelines	267
Example	267
mac address-table multicast static	267
Syntax	267
Parameter Description	267
Default Configuration	268
Command Mode	268
User Guidelines	268
Examples	268
mac address-table static	268
Syntax	269
Syntax Description	269
Default Configuration	269
Command Mode	269
User Guidelines	269
Example	269
port security	269
Syntax	270
Default Configuration	270
Command Mode	270
User Guidelines	270
Example	270
port security max	270
Syntax	270
Default Configuration	271
Command Mode	271
User Guidelines	271
Example	271
show mac address-table multicast	271
Syntax	271
Default Configuration	271
Command Mode	272
User Guidelines	272
Example	273
show mac address-table filtering	273
Syntax	273
Default Configuration	273
Command Mode	273
User Guidelines	274
Example	274
show mac address-table	274
Syntax	274
Parameter Description	274
Default Configuration	274
Command Mode	274
User Guidelines	274
Example	275
show mac address-table address	275
Syntax	275
Parameter Description	275
Default Configuration	276
Command Mode	276
User Guidelines	276
Example	276
show mac address-table count	276
Syntax	276
Parameter Description	277
Default Configuration	277
Command Mode	277
User Guidelines	277
Example	277
show mac address-table dynamic	277
Syntax	278
Parameter Description	278
Default Configuration	278
Command Mode	278
User Guidelines	278
Example	278
show mac address-table interface	279
Syntax	279
Parameter Description	279
Default Configuration	279
Command Mode	279
User Guidelines	279
Example	279
show mac address-table static	280
Syntax	280
Parameter Description	280
Default Configuration	280
Command Mode	280
User Guidelines	280
Example	281
show mac address-table vlan	281
Syntax	281
Parameter Description	281
Default Configuration	281
Command Mode	281
User Guidelines	281
Example	282
show ports security	282
Syntax	282
Default Configuration	282
Command Mode	282
User Guidelines	283
Example	283
show ports security addresses	283
Syntax	284
Default Configuration	284
Command Mode	284
User Guidelines	284
Examples	284
Auto-VoIP Commands	285
Commands in this Chapter	285
show switchport voice	285
Syntax	285
Default Configuration	286
Command Mode	286
User Guidelines	286
Examples	286
switchport voice detect auto	288
Syntax	288
Default Configuration	288
Command Mode	289
User Guidelines	289
Example	289
CDP Interoperability Commands	291
Commands in this Chapter	291
clear isdp counters	291
Syntax	291
Default Configuration	291
Command Mode	291
User Guidelines	292
Example	292
clear isdp table	292
Syntax	292
Default Configuration	292
Command Mode	292
User Guidelines	292
Example	292
isdp advertise-v2	292