Authentication commands, Set authentication, Set authentication local – Perle Systems IOLAN CSS User Manual

Page 35: Set authentication set authentication local

Advertising
background image

Server Commands 35

Authentication Commands

Authentication Commands

Set Authentication

Set Authentication Local

Description Sets the authentication method for the IOLAN.
User Level Admin
Syntax

set authentication type primary|secondary

none|local|radius|kerberos|ldap|tacacs+|securid|nis

[secondary-as-backup on|off] [auth-admin-user-local on|off]

Options

primary

The first authentication method that the IOLAN attempts. Some type of authentication
must be done by the IOLAN, therefore,

None

is not a valid option for the

Primary

Authentication Method

.

secondary

If the

Primary Authentication Method

fails, the next authentication method that the

IOLAN attempts. You can choose to use authentication methods in combination. For
example, you can specify the

Primary Authentication Method

as

Local

and the

Secondary Authentication Method

as

RADIUS

. Therefore, some users can be defined

in the IOLAN (

Local

) others in

RADIUS

.

none

|

local

|

radius

|

kerberos

|

ldap

|

tacacs+

|

securid

|

nis

Specify the authentication method that the IOLAN will use to authenticate users (this
must already be set up in your network).

secondary-as-backup

When enabled, the Secondary Authentication method will be tried only when the
IOLAN cannot communicate with the Primary Authentication server.

auth-admin-user-local

When enabled, the IOLAN will only authenticate the admin user in the local user
database, regardless of any external authentication methods configured. When disabled,
a user called admin must exist when only external authentication methods are
configured, or you will not be able to access the IOLAN as the admin user, except
through the console port. The default is

on

.

Description Configures local authentication settings. When you configure the IOLAN to

authenticate users locally, you can require that the users be configured in the User table.
You can also enable the

Guest

mode. This mode allows users to log into the IOLAN

using any user name, but they will only get authenticated if they match the password
configured for the

Guest

account.

User Level Admin
Syntax

set authentication local [guest-mode on|off] [password <text>]

Options

guest-mode

Allow users who are not defined in the

User

database to log into the IOLAN with any

user ID and the specified password.

Guest

users inherit their settings from the

Default

User

’s configuration.

password

The password that

Guest

users must use to log into the IOLAN.

Advertising