D-Link DES-1210-10/ME [87/129] Security access authentication control enable method lists

4 Configuration DES-1210 Metro Ethernet Managed Switch User Manual

tacacs+ – Adding this parameter will require the user to be authenticated using the TACACS+

protocol from a remote TACACS+ server.

radius – Adding this parameter will require the user to be authenticated using the RADIUS protocol from a

remote RADIUS server.

Security > Access Authentication Control > Enable Method Lists

The Enable Method Lists page is used to set up Method Lists to promote users with user level privileges to

Administrator (Admin) level privileges using authentication methods on the Switch. Once a user acquires

normal user level privileges on the Switch, he or she must be authenticated by a method on the Switch to

gain administrator privileges on the Switch, which is defined by the Administrator. A maximum of eight

Enable Method Lists can be implemented on the Switch, one of which is a default Enable Method List. This

default Enable Method List cannot be deleted but can be configured.

To delete an Enable Method List defined by the use, click Delete button to the entry desired to be deleted.

To modify and Enable Method List, click Edit button to make the changes and click Apply.

Figure 4.136 – Security > Access Authentication control > Enable Method Lists

To define an Enable Login Method List, set the following parameter and click Apply:

Method List Name: Enter a method list name defined by the user of up to 15 characters.

Priority 1, 2, 3, 4: The user may add one, or a combination of up to four of the following authentication

methods to this method list:

none – Adding this parameter will require an authentication to access the Switch.

local – Adding this parameter will require the user to be authenticated using the local user account

database on the Switch.

tacacs+ – Adding this parameter will require the user to be authenticated using the TACACS+

protocol from a remote TACACS+ server.

radius – Adding this parameter will require the user to be authenticated using the RADIUS protocol from a

remote RADIUS server.

Security > Access Authentication Control > Local Enable Password Settings

The Local Enable Password Settings page allows user to configure the locally enabled password. When a

user chooses the "local_enable" method to promote user level privileges to administrator privileges, he or

she will be prompted to enter the password configured here that is locally set on the Switch.

Figure 4.137 – Security > Access Authentication control > Local Enable Password Settings

To set the Local Enable Password, set the following parameters and click Apply:

Old Local Enable Password: If a password was previously configured for this entry, enter it here in order to

change it to a new password.