Force10 Networks S2410s Switch User Manual


 
authentication login
SFTOS Command Reference for the S2410, Version 2.4.1.0 169
dot1x timeout on page 174
dot1x user on page 175
show authentication on page 175
show authentication users on page 176
show dot1x on page 176
show dot1x users on page 179
show users authentication on page 179
users defaultlogin on page 180
users login on page 180
authentication login
This command creates an authentication login list. To authenticate a user, the authentication
methods in the user’s login will be attempted in the order specified by the list until an
authentication attempt succeeds or fails
.
Syntax
authentication login listname [method1 [method2 [method3]]]
no authentication login listname
The listname is up to 15 alphanumeric characters and is not case sensitive. Up to 10
authentication login lists can be configured on the switch. When a list is created, the
authentication method “local” is set as the first method by default.
When the optional parameters
method1, and, optionally, method2 and method3 are used,
an ordered list of the methods specified in those parameters is set in the authentication login
list. If the authentication login list does not exist, a new authentication login list is first
created and then the authentication methods are set in the list. The maximum number of
authentication login methods is three. The possible method values are
local, radius, tacacs,
and
reject:
•The
local keyword indicates that the user’s locally stored ID and password are used for
authentication.
•The
radius keyword indicates that the user’s ID and password will be authenticated
using a RADIUS server.
•The
tacacs keyword indicates that the user’s ID and password will be authenticated
using a TACACS+ server.
•The
reject keyword indicates the user is never authenticated.
Note: The default login list included with the default configuration can not be changed.