Netgear XSM4324FS CLI Manual Software Version 12.x - Page 96

M4300 Intelligent Edge Series Fully Managed Stackable Switches Parameter Definition default Uses the listed authentication methods that follow this argument as the default list of methods when a user logs in. list-name Character string of up to 15 characters used to name the list of authentication methods activated when a user logs in. method1... [method2...] At least one from the following: • enable. Uses the enable password for authentication. • line. Uses the line password for authentication. • local. Uses the local username database for authentication. • none. Uses no authentication. • radius. Uses the list of all RADIUS servers for authentication. • tacacs. Uses the list of all TACACS servers for authentication. Command example: (NETGEAR Switch)(config)# aaa authentication login default radius local enable none no aaa authentication login This command returns to the default. Format Mode aaa authentication login {default | list-name} Global Config aaa authentication enable Use this command to set authentication for accessing higher privilege levels. The default enable list is enableList. It is used by console, and contains the method as enable followed by none. A separate default enable list, enableNetList, is used for Telnet and SSH users instead of enableList. This list is applied by default for Telnet and SSH, and contains enable followed by deny methods. By default, the enable password is not configured. That means that, by default, Telnet and SSH users will not get access to Privileged EXEC mode. On the other hand, with default conditions, a console user always enter the Privileged EXEC mode without entering the enable password. The default and optional list names created with the aaa authentication enable command are used with the enable authentication command. Create a list by entering the aaa authentication enable list-name method command where list-name is any character string used to name this list. The method argument identifies the list of methods that the authentication algorithm tries in the given sequence. The user manager returns ERROR (not PASS or FAIL) for enable and line methods if no password is configured, and moves to the next configured method in the authentication list. The method none reflects that there is no authentication needed. Management Commands 96 CLI Command Reference Manual