Disabling Authentication of Local Management User Accounts

You can disable authentication of management user accounts in local switches if the configured authentication servers (RADIUS Remote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  or TACACS+ Terminal Access Controller Access Control System+. TACACS+ provides separate authentication, authorization, and accounting services. It is derived from, but not backward compatible with, TACACS. ) are available.

You can disable authentication of management users based on the results returned by the authentication server. When configured, locally-defined management accounts (for example, admin) are not allowed to log in if the servers are reachable and the user entry is not found in the authentication server. In this situation, if the RADIUS Remote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources.  or TACACS+ Terminal Access Controller Access Control System+. TACACS+ provides separate authentication, authorization, and accounting services. It is derived from, but not backward compatible with, TACACS.  server is unreachable, meaning it does not receive a response during authentication, or fails to authenticate a user because of a timeout, local authentication is used and you can log in with a locally-defined management account.

The following procedure describes how to disable authentication of local management user accounts.

  1. In the Managed Network node hierarchy, navigate to the Configuration > System > Admin tab.
  2. Expand the Management Users accordion, make sure that the Enable Local Authentication toggle switch is disabled.
  3. Click Submit.
  4. Click Pending Changes.
  5. In the Pending Changes window, select the check box and click Deploy changes.

The following CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. command disables authentication of local management user accounts.

no mgmt-user localauth