Dell™ PowerConnect™ 3324/3348 Switch CLI Guide
Use the aaa authentication login global configuration command to define login authentication. To return to the default configuration, use the no form of this command.
aaa authentication login {default | list-name} method1 [method2...]
no aaa authentication login {default | list-name}
Uses no authentication. Access can be provided without authorization if defined as a specific authentication method. | |
The local user database is checked. This has the same effect as the aaa authentication login local command.
 |
NOTE: On the console, login succeeds without any authentication check if the authentication method is not defined. |
Global Configuration Mode
The default and optional list names created with the aaa authentication login command are used with the login authentication command.
Use the aaa authentication login list-name method command to creat a list for a particular protocol, where list-name is any character string used to name this list. The method argument identifies the list of methods that the authentication algorithm tries, in the given sequence.
The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line.
The following is an example of the CLI commands.
Console (config)# aaa authentication login default radius local enable none |
Use the aaa authentication enable default global configuration command to define authentication method lists for accessing higher privilege levels. To return to the default configuration, use the no form of this command.
aaa authentication enable {default | list-name} method1 [method2...]
no aaa authentication enable default
If the default list is not set, only the enable password is checked. This has the same effect as the aaa authentication enable default enable command.
On the console, the enable password is used if it exists. If no password is set, the process still succeeds. This has the same effect as using the aaa authentication enable default enable none command.
Global Configuration Mode
The default and optional list names created with the aaa authentication enable command are used with the enable authentication command.
Use the aaa authentication enable list-name method command to create a list, where list-name is any character string used to name this list. The method argument identifies the list of methods that the authentication algorithm tries, in the given sequence.
The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line.
All aaa authentication enable default requests sent by the device to a RADIUS server include the username $enabx$., where x is the requested privilege level.
The following example sets authentication when accessing higher privilege levels.
Console (config)# aaa authentication enable default |
Use the login authentication line configuration command to specify the login authentication method list for a remote Telnet or console. To return to the default specified by the authentication login command, use the no form of this command.
login authentication {default | list-name}
no login authentication
Uses the default set with the command authentication login.
Line Configuration Mode
There are no user guidelines for this command.
The following example specifies the default authenticationmethod for a remote Telnet or console.
Console (config-line)# login authentication default |
Use the enable authentication line configuration command to specify the authentication method list when accessing a higher privilege level from a remote Telnet or console. To return to the default specified by the enable authentication command, use the no form of this command.
enable authentication {default | list-name}
no enable authentication
Uses the default set with the authentication enable command.
Line Configuration Mode
There are no user guidelines for this command.
The following example specifies the default authentication method when accessing a higher privilege level from a remote Telnet or console.
Console (config-line)# enable authentication default |
Use the ip http authentication global configuration mode command to specify authentication methods for http. To return to the default, use the no form of this command.
ip http authentication method1 [method2...]
no ip http authentication
Uses no authentication. Access can be provided without authorization if defined as a specific authentication method. | |
The local user database is checked. This has the same effect as the ip http authentication local command.
Global Configuration Mode
The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method from the command line.
The following example configures the http authentication as either RADIUS or local in that order.
Console (config)# ip http authentication radius local |
Use the ip https authentication global configuration command to specify authentication methods for https. To return to the default, use the no form of this command.
ip https authentication method1 [method2...]
no ip https authentication
Uses no authentication. Access can be provided without authorization if defined as a specific authentication method. | |
The local user database is checked. This has the same effect as the ip https authentication local command.
Global Configuration Mode
The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line.
The following is an example of the CLI command.
Console (config)# ip https authentication radius local |
Use the authentication methods privilege EXEC command to display information about the authentication methods.
show authentication methods
This command has no default configuration.
Privileged EXEC Mode
There are no user guidelines for this command.
The following example displays the authentication configuration.
Use the password line configuration command to specify a password on a command line. To remove the password, use the no form of this command.
password password [encrypted]
no password
This command has no default configuration.
Line Configuration Mode
There are no user guidelines for this command.
The following example specifies a password.
Console (config-line)# password dell |
Use the enable password global configuration command to set a local password to control access to user and privilege levels. To remove the password requirement, use the no form of this command.
enable password [level level ] password [encrypted]
no enable password [ level level ]
This command has no default configuration.
Global Configuration Mode
There are no user guidelines for this command.
The following example sets a local level for a password to control access to user and privilege levels.
Console (config)# enable password level 15 dell |
Use the username global configuration command to establish a user name-based authentication system. To remove a user name, use the no form of this command.
username name [password password] [privilege level] [encrypted]
no username
The default privilege level is 1.
Global Configuration Mode
When creating a user name, the default priority is 1, which does not allow access to the device. A priority of 15 must be specifically set to enable access to the device.
The following example configures a user with the encrypted password and user level for the system.
Console (config)# username bob password lee 15 encrypted |
The show users accounts privileged EXEC command displays information about the local user database.
show users accounts
This command has no default configuration.
Privileged EXEC Mode
There are no user guidelines for this command.
The following example displays the local users configured with access to the system.
Console# show users accounts
Username Privilege --------- --------- Bob 15 Robert 15 |
