Netgear M5300-52G3 Command Line Interface (CLI) User Manual - Page 673

ProSafe Managed Switch Default Uses the listed authentication methods that follow this argument as the default list of methods when a user accesses a higher privilege level. list-name Character string used to name the list of authentication methods activated when a user accesses a higher privilege level. Up to 12 characters. method1 [method2...] At least one from the following table: Keyword deny enable line none radius tacacs Description Use to deny access. Uses the enable password for authentication. Uses the line password for authentication. Uses no authentication. Uses the list of all RADIUS servers for authentication. Uses username "$enabx$."where x is the privilege level. Uses the list of all TACACS servers for authentication. Uses username "$enabx$." where x is the privilege level. Note: If the default list is not set, only the enable password is checked. This has the same effect as the following command: aaa authentication enable default enable On the console, the enable password is used if it exists. If no password is set, the process will succeed anyway. This has the same effect as the following command: aaa authentication enable default enable none no aaa authentication enable Use this command to remove the authentication method. Format Mode no aaa authentication enable {default | list-name} method1 [method2...] Global Config aaa authentication dot1x Use this command to set authentication for dot1x users. The method argument identifies the list of methods that the authentication algorithm tries, in the given sequence. The additional methods of authentication are used only if the previous method returns an error, not if there is an authentication failure. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line. For example if none is Management Commands 673