Authentication

Enables or disables authentication, authorization, and accounting (aaa) attributes (see Configuring Security for procedures to provision security options).

Note 1:  + = select one parameter from the list Note 2: **ne - Substitute olt for ne for the OLT2> on the CLI command path.

• Command Path - ESUx>ne aaa authentication
• Command Path - OLT2>olt aaa authentication
• Command - aaa
• Action -
  • authentication - commands related to end-user and craft-user authentication   
    • Edit - modify existing authentication configuration.
      • +dot1x - modify 802.1x authentication
      • +login - modify craft login authentication
        • local - use local user database for an authentication method
          • local |no local
        • radius - use RADIUS for an authentication method
          • admin= - set administrative state of RADIUS authentication method
            • enabled|disabled
          • protocol= - set RADIUS craft login authentication protocol
            • chap|mschapv2|pap
    • Show - show all authentication configuration
      • +dot1x - display 802.1x authentication
      • +login - display craft login authentication

Enable login authentication

1. From the ESUx> command line, input **ne aaa authentication edit login local and press Enter. Output similar to the following is displayed:

   ESUx> **ne aaa authentication edit login local <enter> command completed ESUx> _

Enable dot1x authentication

1. From the ESUx> command line, input **ne aaa authentication edit dot1x radius admin=enabled and press Enter. Output similar to the following is displayed:

   ESUx> **ne aaa> authentication edit dot1x radius admin=enabled <enter> command completed ESUx> _

Show dot1x authentication

1. From the ESUx> command line, input **ne aaa authentication edit dot1x radius admin=enabled and press Enter. Output similar to the following is displayed:

   ESUx> **ne aaa authentication show dot1x <enter> | IEEE 802.1x Authentication Configuration | |===================================================================| | admin : enabled | | | |===================================================================| ESUx> _

Authentication via local login craft interface (Telnet, SSH, etc.).

1. From the ESUx> command line, input **ne aaa authentication edit login local radius protocol=mschapv2 admin=enabled, and press Enter. Output similar to the following is displayed:

   ESUx> **ne aaa authentication edit login local radius protocol=mschapv2 admin=enabled <enter> command completed ESUx> _

Next