Qtech QSW-8200-28T-POEAC- DC Команды для базовой конфигурации онлайн [24/77] 481628

User Manual

Chapter 1. Commands for Basic Switch Configuration 24

www.qtech.ru

only sends the accounting stop when the user exits the login only; none does not send

the accounting start or the accounting stop; method is the list of the accounting

method, it only supports tacacs keyword; tacacs uses the remote TACACS+ server to

count.

 Default: There is no accounting method.

 Command Mode: Global Mode.

 Usage Guide: console and vty login method are able to set the corresponding

command accounting method respectively, the accounting method only supports

TACACS+ method currently. Only the stop information of the accounting is recorded,

whether command accounting configures start-stop method or stop-only method.

 Example: Configure the command accounting with the telnet method.

 Switch(config)#authorization line vty command 15 start-stop tacacs

1.2.4 authentication enable

 Command: authentication enable method1 [method2…]

 no authentication enable

 Function: Configure the list of the enable authentication method. The no command

restores the default authentication method.

 Parameters: method is the list of the authentication method, it must be among local,

tacacs and radius keywords; local uses the local database to authenticate; tacacs uses

the remote TACACS+ authentication server to authenticate; radius uses the remote

RADIUS authentication server to authenticate.

 Default: The local authentication is enable command by default.

 Command Mode: Global Mode.

 Usage Guide: The enable authentication method can be any one or combination of

Local, RADIUS and TACACS. When login method is configuration in combination, the

preference goes from left to right. If the users have passed the authentication method,

authentication method of lower preferences will be ignored. To be mentioned, if the

user receives corresponding protocol’s answer whether refuse or incept, it will not

attempt the next authentication method (Exception: if the local authentication method

failed, it will attempt the next authentication method); it will attempt the next

authentication method if it receives nothing. And AAA function RADIUS server should

be configured before the RADIUS configuration method can be used. And TACACS

server should be configured before the TACACS configuration method can be used.

 Example: Configure the enable authentication method to be tacacs and local.

 Switch(config)#authentication enable tacacs local

1.2.5 authentication ip access-class

 Command: authentication ip access-class {<num-std>|<name>}

 no authentication ip access-class

 Function: Binding standard IP ACL protocol to login with Telnet/SSH/Web; the no form

command will cancel the binding ACL.