Configuration Guide Vol. 1


10.1.1 Command list

The following table lists the commands used to configure login security.

Table 10-1: List of configuration commands

Command name

Description

aaa authentication enable

Specifies the authentication method to be used when changing to administrator mode (by the enable command).

aaa authentication enable attribute-user-per-method

Changes the user name attributes used in authentication when changing to administrator mode (by the enable command).

aaa authentication enable end-by-reject

Terminates authentication if an attempt to change to administrator mode (by the enable command) is denied.

aaa authentication login

Specifies the authentication method to be used at remote login.

aaa authentication login console

Applies the authentication method specified by the aaa authentication login command when the user logs in from the console (RS232C).

aaa authentication login end-by-reject

Terminates authentication if login authentication is denied.

aaa authorization commands

Specifies that command authorization is to be performed by a RADIUS or TACACS+ server.

aaa authorization commands console

Applies the command authorization specified by the aaa authorization commands command when the user logs in from the console (RS232C).

banner

Defines the messages to be displayed before and after the user logs in.

commands exec

Adds a command string to a command list used when local command authorization is enabled.

ip access-group

Sets an access list that specifies the IPv4 addresses of remote operation terminals for which remote login to the Switch is permitted or denied.

ipv6 access-class

Sets an access list that specifies the IPv6 addresses of remote operation terminals for which remote login to the Switch is permitted or denied.

parser view

Generates a command list used when local command authorization is enabled.

username

Sets for a specified user a command list or command class used in local command authorization.

The following table lists the operation commands related to login security.

Table 10-2: List of operation commands

Command name

Description

adduser

Adds an account for a new login user.

rmuser

Deletes a user login account registered by the adduser command.

password

Only the password of the login user can be changed.

clear password

Deletes the password of a login user.

show sessions

Display the users currently logged in to the Switch.

show whoami

Shows only the user, logged in to the Switch, who executed this command.

killuser

Forcibly logs out a login user.