10.1.1 Command list
The following table lists the commands used to configure login security.
Command name |
Description |
---|---|
aaa authentication enable |
Specifies the authentication method to be used when changing to administrator mode (by the enable command). |
aaa authentication enable attribute-user-per-method |
Changes the user name attributes used in authentication when changing to administrator mode (by the enable command). |
aaa authentication enable end-by-reject |
Terminates authentication if an attempt to change to administrator mode (by the enable command) is denied. |
aaa authentication login |
Specifies the authentication method to be used at remote login. |
aaa authentication login console |
Applies the authentication method specified by the aaa authentication login command when the user logs in from the console (RS232C). |
aaa authentication login end-by-reject |
Terminates authentication if login authentication is denied. |
aaa authorization commands |
Specifies that command authorization is to be performed by a RADIUS or TACACS+ server. |
aaa authorization commands console |
Applies the command authorization specified by the aaa authorization commands command when the user logs in from the console (RS232C). |
banner |
Defines the messages to be displayed before and after the user logs in. |
commands exec |
Adds a command string to a command list used when local command authorization is enabled. |
ip access-group |
Sets an access list that specifies the IPv4 addresses of remote operation terminals for which remote login to the Switch is permitted or denied. |
ipv6 access-class |
Sets an access list that specifies the IPv6 addresses of remote operation terminals for which remote login to the Switch is permitted or denied. |
parser view |
Generates a command list used when local command authorization is enabled. |
username |
Sets for a specified user a command list or command class used in local command authorization. |
The following table lists the operation commands related to login security.
Command name |
Description |
---|---|
adduser |
Adds an account for a new login user. |
rmuser |
Deletes a user login account registered by the adduser command. |
password |
Only the password of the login user can be changed. |
clear password |
Deletes the password of a login user. |
show sessions |
Display the users currently logged in to the Switch. |
show whoami |
Shows only the user, logged in to the Switch, who executed this command. |
killuser |
Forcibly logs out a login user. |