Administrator Guide

tacacs+

Prompt for a username and password and use a TACACS+ server to authenticate.

1 Congure an authentication method list. You may use a mnemonic name or use the keyword default. The default authentication

method for terminal lines is local and the default method list is empty.

CONFIGURATION mode

aaa authentication login {method-list-name | default} [method-1] [method-2] [method-3]

[method-4] [method-5] [method-6]

2 Apply the method list from Step 1 to a terminal line.

CONFIGURATION mode

3 If you used the line authentication method in the method list you applied to the terminal line, congure a password for the terminal line.

LINE mode

password

Example of Terminal Line Authentication

In the following example, VTY lines 0-2 use a single authentication method, line.

DellEMC(conf)#aaa authentication login myvtymethodlist line

DellEMC(conf)#line vty 0 2

DellEMC(config-line-vty)#login authentication myvtymethodlist

DellEMC(config-line-vty)#password myvtypassword

DellEMC(config-line-vty)#show config

line vty 0

password myvtypassword

line vty 1

password myvtypassword

line vty 2

password myvtypassword

DellEMC(config-line-vty)#

Setting Timeout for EXEC Privilege Mode

EXEC timeout is a basic security feature that returns Dell EMC Networking OS to EXEC mode after a period of inactivity on the terminal

lines.

To set timeout, use the following commands.

• Set the number of minutes and seconds. The default is 10 minutes on the console and 30 minutes on VTY. Disable EXEC time out

by setting the timeout period to 0.

LINE mode

exec-timeout minutes [seconds]

• Return to the default timeout values.

LINE mode

no exec-timeout

Example of Setting the Timeout Period for EXEC Privilege Mode

The following example shows how to set the timeout period and how to view the conguration using the show config command from

LINE mode.

DellEMC(conf)#line con 0

DellEMC(config-line-console)#exec-timeout 0

DellEMC(config-line-console)#show config

Management