xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
53
DGS-3450:admin# show authen_login method_list_name login_list_1
Command: show authen_login method_list_name login_list_1
Method List Name Priority Method Name Comment
---------------- -------- --------------- ------------------
login_list_1 1 Built-in Group
2 tacacs Built-in Group
3 mix_1 User-defined Group
4 local Keyword
DGS-3450:admin#
create authen_enable method_list_name
Purpose
This command is used to create a user-defined method list of authentication methods for
promoting a user's privilege to Admin level.
Syntax
create authen_enable method_list_name <string 15>
Description
Creates a user-defined method list of authentication methods for promoting a user's privilege
to Admin level. The maximum number of supported enable method lists is 8.
Parameters
<string 15>
- The user-defined method list name
Restrictions
Only Administrator can issue this command.
Example usage:
To create a user-defined method list called “enable_list_1” for promoting a user's privilege to Admin level:
DGS-3450:admin# create authen_enable method_list_name enable_list_1
Command: create authen_enable method_list_name enable_list_1
Success.
DGS-3450:admin#
config authen_enable
Purpose
This command is used to configure a user-defined or default method list of authentication
methods for promoting a user's privilege to Admin level.
Syntax
config authen_enable [default | method_list_name <string 15>] method {tacacs |
xtacacs | | radius | server_group <string 15> | local _enable | none}
Description
Configures a user-defined or default method list of authentication methods for promoting a
user's privilege to Admin level. The sequence of methods will affect the authentication result.
For example, if the sequence is first, followed by tacacs and local_enable, when a
user tries to login, the authentication request will be sent to the first server host in the
built-in server group. If the first server host in the group is missing, the authentication
request will be sent to the second server host in the group, and so on. If all server
hosts in the group are missing, the authentication request will be sent to the first
server host in the tacacs group. If all server hosts in the tacacs group are missing, the local
enable password in the device will be used to authenticate the user’s password. The local
enable password in the device can be configured using the “config admin local_password”
CLI command.
Parameters
default
- Specify the default method list of authentication methods.
method_list_name
- Specify the user-defined method list of authentication methods.
tacacs
- Specify authentication by the built-in server group “tacacs”.
xtacacs
- Specify authentication by the built-in server group “xtacacs”.
