System information

132
DWS-1008 CLI Reference Guide
D-Link Systems, Inc.
AAA Commands
set authentication admin
Configures authentication and defines where it is performed for specified users with
administrative access through Telnet.
Syntax: set authentication admin user-glob method1 [method2] [method3] [method4]
user-glob Single user or set of users with administrative access or network
access. Specify a username, use the double-asterisk wildcard character
(**) to specify all usernames, or use the single-asterisk wildcard character
(*) to specify a set of usernames up to or following the first delimiter
character - either an at sign (@) or a period (.). Note: This option does
not apply if mac is specified. For mac, specify a mac-addr-glob.
method1 At least one of up to four methods that MSS uses to process accounting
method2 records. Specify one or more of the following methods in priority order. If
method3 the first method does not succeed, MSS tries the second method, and
method4 so on. A method can be one of the following:
• local - Stores accounting records in the local database on the
switch. When the local accounting storage space is full, MSS
overwrites older records with new ones.
• server-group-name - Stores accounting records on one or
more Remote Authentication Dial-In User Service (RADIUS)
servers. You can also enter the names of existing RADIUS
server groups as methods.
• none - For users with administrative access only, MSS
performs no authentication, but prompts for a username and
password and accepts any combination of entries, including
blanks.
Note: The authentication method none you can specify for administrative
access is different from the fallthru authentication type none, which
applies only to network access. The authentication method none allows
access to the switch by an administrator. The fallthru authentication type
none denies access to a network user.
Defaults: By default, authentication is deactivated for all admin users. The default authentication
method in an admin authentication rule is local. MSS checks the local database for
authentication.
Access: Enabled