Netgear XSM4324FS CLI Manual Software Version 12.x - Page 95

M4300 Intelligent Edge Series Fully Managed Stackable Switches specify a new password that you must use each subsequent time that you log in. After you specify the new password, you are logged out and then must log in again, using your new password. The default guest user cannot log in until the admin user specifies a password for the guest user. You cannot reset the new password to the default password. For example, if you enter the username admin nopassword command or clear password command, the password is not reset to the default password. However, if you enter the clear-config command, the passwords for the default admin user and default guest user are reset to defaults. In such a situation, the admin user must again specify a new password after logging in for the first time. Similarly, the admin user must again specify a password for the default guest user. Note: You cannot delete the admin user, which is the only user with read/write privileges on the switch. You can configure up to five read-only users (that is, guest users) on the switch. aaa authentication login Note: In software version 12.0.11.8 and later software versions, a user with privilege level 1 cannot enter in Privilege Exec Mode and cannot execute Privilege Exec commands. Use this command to set authentication at login. The default and optional list names created with the command are used with the aaa authentication login command. Create a list by entering the aaa authentication login list-name method command, where list-name is any character string used to name this list. The method argument identifies the list of methods that the authentication algorithm tries, in the given sequence. The additional methods of authentication are used only if the previous method returns an error, not if there is an authentication failure. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line. For example, if none is specified as an authentication method after radius, no authentication is used if the RADIUS server is down. If you configure local as the first method in the list, the switch tries no other methods. Default Format Mode • defaultList. Used by the console and only contains the method none. • networkList. Used by telnet and SSH and only contains the method local. aaa authentication login {default | list-name} method1 [method2...] Global Config Management Commands 95 CLI Command Reference Manual