Loading ...
Loading ...
Loading ...
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide
56
6-13 aaa authentication network
This command is used to enable AAA network access authentication and configure the network access user
authentication method list. The no form of this command is used to delete the network access user authentication
method list.
aaa authentication network default method1 [method2...]
no aaa authentication network default
Parameters
6-14 aaa authorization network
This command is used to authorize the service requests (including protocols like 802.1X) from the users that access
the network. The no form of this command is used to disable the authorization function.
aaa authorization network default method1 [method2...]
no aaa authorization network default
Parameters
default When this parameter is used, the following defined network access user
authentication method list is used as the default method for user authentication.
method Syntax "{local | none | group radius | group_name}".
Up to four methods supported:
local - Specifies to use the local user name database for authentication.
none - Specifies to bypass authentication.
group - Specifies to be followed by radius or a group name.
"group radius" means to use all RADIUS servers group.
“group group_name” means to use a specific RADIUS group, created by means
of the aaa group server radius global configuration command.
Default
None.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 15
Usage Guideline
If the AAA network access security service (such as 802.1X) is enabled on the
device, users must use AAA for network access user authentication negotiation. You
must use the ‘aaa authentication network’ command to configure a default or
optional method list for network access user authentication. The next method can be
used for authentication only when the current method does not work.
Example
This example shows how to define the AAA authentication method list for the
network access security service. In the authentication method list, the RADIUS
security server is first used for authentication. If the RADIUS security server does not
respond, the local user database is used for authentication.
DXS-3600-32S#configure terminal
DXS-3600-32S(config)#aaa authentication network default group radius local
DXS-3600-32S(config)#
default When this parameter is used, the following defined method list is used as the default
method for Network authorization.
Loading ...
Loading ...
Loading ...