Qtech QSW-8200-28F-AC-DC — основные команды для настройки коммутаторов и аутентификации [7/77]

Превью страниц Страница 7 / 77

User Manual

Chapter 1. Commands for Basic Switch Configuration 7

www.qtech.ru

Chapter 1 COMMANDS FOR BASIC SWITCH CONFIGURATION

1.1 Commands for Basic Configuration

1.1.1 authentication line

 Command: authentication line {console | vty | web} login {local | radius | tacacs}

 no authentication line {console | vty | web} login

 Function: Configure VTY (login with Telnet and SSH), Web and Console, so as to select

the priority of the authentication mode for the login user. The no form command

restores the default authentication mode.

 Default: No configuration is enabled for the console login method by default. Local

authentication is enabled for the VTY and Web login method by default.

 Command Mode: Global Mode.

 Usage Guide: The authentication method for Console, VTY and Web login can be

configured respectively. And authentication method can be any one or combination of

Local, RADIUS and TACACS. When login method is configured in combination, the

preference goes from left to right. If the users have passed the authentication method,

authentication method of lower preferences will be ignored. To be mentioned, if the

user receives corresponding protocol’s answer whether refuse or accept, it will not

attempt the next authentication method (Exception: if the local authentication method

failed, it will attempt the next authentication method); it will attempt the next

authentication method if it receives nothing. AAA function and RADIUS server should

be configured before the RADIUS authentication can be used. And TACACS server

should be configured before the TACACS configuration method can be used.

 The authentication line console login command is exclusive with the login command.

The authentication line console login command configures the switch to use the

Console login method. And the login command makes the Console login to use the

passwords configured by the password command for authentication.

 If local authentication is configured while no local users are configured, users will be

able to login the switch via the Console method.

 Example: Configure the Telnet and ssh login method to RADIUS authentication method.

 Switch(config)# authentication line vty login radius

 Relative Command: aaa enable, radius-server authentication host, tacacs-server

authentication host, tacacs-server key

1.1.2 banner

 Command: banner motd <LINE>

 no banner motd

 Function: This command is used to configure the information displayed when the login

authentication of a telnet or console user is successful, the no command configures

that the information is not displayed when the authentication is successful.