beautypg.com

Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 1242

background image

AAA Commands

Software Reference for x310 Series Switches

45.20

AlliedWare Plus

TM

Operating System - Version 5.4.4C

C613-50046-01 REV A

For example, if the method list specifies group tacacs+ local, and a user attempts to log in
with a password that does not match a user entry in the first TACACS+ server, if this
TACACS+ server denies the authentication request, then the switch does not try any other
TACACS+ servers not the local user database; the user login fails.

Examples

To configure the default authentication method list for user login to use first all available
RADIUS servers for user login authentication and then the local user database, use the
following commands:

To configure a user login authentication method list called USERS to use first the RADIUS
server group RAD_GROUP1 for user login authentication and then the local user database,
use the following commands:

To configure a user login authentication method list called USERS to use first the
TACACS+ servers for user login authentication and then the local user database, use the
following commands:

To return to the default method list (local is the default server), use the following
commands:

To delete an existing authentication method list USERS created for user login
authentication, use the following commands:

Related Commands

aaa accounting commands
aaa authentication enable default group tacacs+
login authentication

awplus#

configure terminal

awplus(config)#

aaa authentication login default group radius
local

awplus#

configure terminal

awplus(config)#

aaa authentication login USERS group
RAD_GROUP1 local

awplus#

configure terminal

awplus(config)#

aaa authentication login USERS group tacacs+
local

awplus#

configure terminal

awplus(config)#

no aaa authentication login default

awplus#

configure terminal

awplus(config)#

no aaa authentication login USERS