User manual

4 Configuration DES-1210 Metro Ethernet Managed Switch User Manual
81
tacacs+ – Adding this parameter will require the user to be authenticated using the TACACS+
protocol from a remote TACACS+ server.
radius – Adding this parameter will require the user to be authenticated using the RADIUS protocol from a
remote RADIUS server.
Security > Access Authentication Control > Enable Method Lists
The Enable Method Lists page is used to set up Method Lists to promote users with user level privileges to
Administrator (Admin) level privileges using authentication methods on the Switch. Once a user acquires
normal user level privileges on the Switch, he or she must be authenticated by a method on the Switch to
gain administrator privileges on the Switch, which is defined by the Administrator. A maximum of eight
Enable Method Lists can be implemented on the Switch, one of which is a default Enable Method List. This
default Enable Method List cannot be deleted but can be configured.
To delete an Enable Method List defined by the use, click Delete button to the entry desired to be deleted.
To modify and Enable Method List, click Edit button to make the changes and click Apply.
Figure 4.136 – Security > Access Authentication control > Enable Method Lists
To define an Enable Login Method List, set the following parameter and click Apply:
Method List Name: Enter a method list name defined by the user of up to 15 characters.
Priority 1, 2, 3, 4: The user may add one, or a combination of up to four of the following authentication
methods to this method list:
none – Adding this parameter will require an authentication to access the Switch.
local – Adding this parameter will require the user to be authenticated using the local user account
database on the Switch.
tacacs+ – Adding this parameter will require the user to be authenticated using the TACACS+
protocol from a remote TACACS+ server.
radius – Adding this parameter will require the user to be authenticated using the RADIUS protocol from a
remote RADIUS server.
Security > Access Authentication Control > Local Enable Password Settings
The Local Enable Password Settings page allows user to configure the locally enabled password. When a
user chooses the "local_enable" method to promote user level privileges to administrator privileges, he or
she will be prompted to enter the password configured here that is locally set on the Switch.
Figure 4.137 – Security > Access Authentication control > Local Enable Password Settings
To set the Local Enable Password, set the following parameters and click Apply:
Old Local Enable Password: If a password was previously configured for this entry, enter it here in order to
change it to a new password.