Fortinet MR1 - Manual (Page 436)

436
Viewing Authentication List Summary Page
Non-Configurable Data
Authentication List - Identifies the authentication login list summarized in this row.
Method List - The ordered list of methods configured for this login list.
Login Users - The users you assigned to this login list on the User Login Configuration screen. This list
is used to authenticate the users for system login access.
802.1x Port Security Users The users you assigned to this login list on the Port Access Control User
Login Configuration screen - This list is used to authenticate the users for port access, using the IEEE
802.1x protocol.
Command Buttons
Refresh - Update the information on the page.
Defining User Login Page
Note: This page provides a user account (from those already created) to be added
into the Authentication List.
Each configured user is assigned to a login list that specifies how the user should be
authenticated when attempting to access the switch or a port on the switch. After creating a
new user account on the User Account screen, you should assign that user to a login list for
the switch using this screen and, if necessary, to a login list for the ports using the Port
Access Control User Login Configuration screen. If you need to create a new login list for the
user, you would do so on the Login Configuration screen.
The pre-configured users, admin and guest, are assigned to a pre-configured list named
defaultList, which you may not delete. All newly created users are also assigned to the
defaultList until you specifically assign them to a different list.
A user that does not have an account configured on the switch is termed the 'default' or
'non-configured' user. If you assign the 'non-configured user' to a login list that specifies
authentication via the RADIUS server, you will not need to create an account for all users on
each switch. However, by default the 'non-configured user' is assigned to 'defaultList', which
by default uses local authentication.
Selection Criteria
User - Select the user you want to assign to a login list. Note that you must always associate the admin
user with the default list. This forces the admin user to always be authenticated locally to prevent full
lockout from switch configuration. If you assign a user to a login list that requires remote authentication,