Filter
Top Products
DES-7200 Configuration Guide Chapter 1 AAA Configuration
1-13
Command Function
configure terminal
Enter the global configuration mode.
username name [password
password]
Establish the local username and set the
password.
username name [privilege level]
Set the user privilege level. (Optional)
end
Return to the privileged mode.
show running-config
Confirm the configuration.
To define the local Enable authentication method list, run the following commands:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Turn on the AAA switch.
aaa authentication enable default
local
Define the local method list.
end
Return to the privileged mode.
show aaa method-list
Confirm the configured method list.
configure terminal
Enter the global configuration mode.
show running-config
Confirm the configuration.
1.3.6.2 Using Radius for Enable
authentication
The standard RADIUS server can pass the privilege level binded with the Service-Type
attribute(the standard attribute number is 6), can specify the privilege with 1 or 15 level. The
extened RADIUS server can configure the privilege level of the administrator(the private
attribute number is 42), can specify 0-15 privilege level. For the details of the RADIUS server,
see Specifying the RADIUS Private Attribute Type in Configuring RADIUS.
To configure the use of RADIUS authentication server for enable authentication, it is required
to first configure the RADIUS server, then the RADIUS server-based enable authentication
method list. Run the following commands in the global configuration mode:
Command Function
configure terminal
Enter the global configuration mode.
aaa new-model
Turn on the AAA switch.
aaa authentication enable default
group radius
Define RADIUS authentication method.
end
Return to the privileged mode.
show aaa method-list
Confirm the configured method list.