Cisco SCE2020-4XGBE-SM - Configuring AAA Privilege Level Authorization Methods

5-24
Cisco SCE 2000 and SCE 1000 Software Configuration Guide
OL-7827-12
Chapter 5 Configuring the Management Interface and Security
Configuring the Available Interfaces
How to Delete the Login Authentication Methods List
Step 1 From the SCE(config)# prompt, type no aaa authentication login default and press Enter.
If the login authentication methods list is deleted, the default login authentication method only (enable
password) will be used. TACACS+ authentication will not be used.
Configuring AAA Privilege Level Authorization Methods
• Options, page 5-24
• How to Specify AAA Privilege Level Authorization Methods, page 5-24
• How to Delete the AAA Privilege Level Authorization Methods List, page 5-24
Options
The following options are available:
• method — the login authorization methods to be used. You may specify up to four different
methods, in the order in which they are to be used.
– group TACACS+ — Use TACACS+ authorization.
– local — Use the local username database for authorization
– enable (default) — Use the " enable " password for authorization
– none — Use no authorization.
How to Specify AAA Privilege Level Authorization Methods
Step 1 From the SCE(config)# prompt, type aaa authentication enable default method1 [method2...] and
press Enter.
You may list a maximum of four methods; all four methods explained above. List them in the order of
priority.
How to Delete the AAA Privilege Level Authorization Methods List
Step 1 From the SCE(config)# prompt, type no aaa authentication enable default and press Enter.
If the privilege level authorization methods list is deleted, the default login authentication method only
(enable password) will be used. TACACS+ authentication will not be used.