D-Link dws-1008 Switch User Manual


 
D-Link DWS-1008 CLI Manual 187
Usage: You can configure different authentication methods for different groups of users. (For
details, see “User Globs, MAC Address Globs, and VLAN Globs” on page 7.)
If you specify multiple authentication methods in the set authentication console command, MSS
applies them in the order in which they appear in the command, with these results:
• If the first method responds with pass or fail, the evaluation is final.
• If the first method does not respond, MSS tries the second method, and so on.
• However, if local appears first, followed by a RADIUS server group, MSS ignores any failed
searches in the local database and sends an authentication request to the RADIUS server
group.
Note: If a AAA rule specifies local as a secondary AAA method, to be used if the RADIUS servers
are unavailable, and MSS authenticates a client with the local method, MSS starts again at the
beginning of the method list when attempting to authorize the client. This can cause unexpected
delays during client processing and can cause the client to time out before completing logon.
Examples: The following command configures administrator Jose, who connects via Telnet, for
authentication on RADIUS server group sg3:
DWS-1008# set authentication admin Jose sg3
success: change accepted.
See Also:
• clear authentication admin
• set authentication console
• set authentication dot1x
• set authentication mac
• set authentication web
• show aaa
set authentication console
Configures authentication and defines where it is performed for specified users with administrative
access through a console connection.
Syntax: set authentication console user-glob method1 [method2] [method3] [method4]