Filter
Top Products
192 CHAPTER 7: AAA COMMANDS
A method can be one of the following:
local — Uses the local database of usernames and user groups
on the WX switch for authentication.
server-group-name — Uses the defined group of RADIUS servers
for authentication. You can enter up to four names of existing
RADIUS server groups as methods.
none — For users with administrative access only, MSS performs
no authentication, but prompts for a username and password and
accepts any combination of entries, including blanks.
The authentication method none you can specify for administrative
access is different from the fallthru authentication type none, which
applies only to network access. The authentication method none allows
access to the WX switch by an administrator. The fallthru authentication
type none denies access to a network user. (See “set service-profile
auth-fallthru” on page 301.)
For more information, see “Usage.”
Defaults — By default, authentication is deactivated for all console
users, and the default authentication method in a console authentication
rule is none. MSS requires no username or password, by default. These
users can press Enter at the prompts for administrative access.
3Com recommends that you change the default setting unless the WX
switch is in a secure physical location.
Access — Enabled.
History —Introduced in MSS Version 3.0.
Usage — You can configure different authentication methods for
different groups of users. (For details, see “User Globs, MAC Address
Globs, and VLAN Globs” on page 24.)
If you specify multiple authentication methods in the set authentication
console command, MSS applies them in the order in which they appear
in the command, with these results:
If the first method responds with pass or fail, the evaluation is final.
If the first method does not respond, MSS tries the second method, and
so on.