Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual
Page 1242
AAA Commands
Software Reference for x310 Series Switches
45.20
AlliedWare Plus
TM
Operating System - Version 5.4.4C
C613-50046-01 REV A
For example, if the method list specifies group tacacs+ local, and a user attempts to log in
with a password that does not match a user entry in the first TACACS+ server, if this
TACACS+ server denies the authentication request, then the switch does not try any other
TACACS+ servers not the local user database; the user login fails.
Examples
To configure the default authentication method list for user login to use first all available
RADIUS servers for user login authentication and then the local user database, use the
following commands:
To configure a user login authentication method list called USERS to use first the RADIUS
server group RAD_GROUP1 for user login authentication and then the local user database,
use the following commands:
To configure a user login authentication method list called USERS to use first the
TACACS+ servers for user login authentication and then the local user database, use the
following commands:
To return to the default method list (local is the default server), use the following
commands:
To delete an existing authentication method list USERS created for user login
authentication, use the following commands:
Related Commands
aaa accounting commands
aaa authentication enable default group tacacs+
login authentication
awplus#
configure terminal
awplus(config)#
aaa authentication login default group radius
local
awplus#
configure terminal
awplus(config)#
aaa authentication login USERS group
RAD_GROUP1 local
awplus#
configure terminal
awplus(config)#
aaa authentication login USERS group tacacs+
local
awplus#
configure terminal
awplus(config)#
no aaa authentication login default
awplus#
configure terminal
awplus(config)#
no aaa authentication login USERS