• enable: use the password the enable password
command defines in CONFIGURATION mode.
• line: use the password the password command defines
in LINE mode.
• none: no authentication.
• radius: use the RADIUS servers configured with the
radius-server host command.
• tacacs+: use the TACACS+ server(s) configured with the
tacacs-server host command.
... method2 (OPTIONAL) In the event of a “no response” from the first
method, the system applies the next configured method.
Defaults Use the enable password.
Command
Modes
CONFIGURATION
Command
History
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Usage
Information
By default, the Enable password is used. If you configure aaa authentication
enable default
, the system uses the methods defined for Enable access
instead.
Methods configured with the aaa authentication enable command are
evaluated in the order they are configured. If authentication fails using the primary
method, the system employs the second method (or third method, if necessary)
automatically. For example, if the TACACS+ server is reachable, but the server key
is invalid, the system proceeds to the next authentication method. The TACACS+ is
incorrect, but the user is still authenticated by the secondary method.
Related
Commands
enable password — changes the password for the enable command.
login authentication — enables AAA login authentication on the terminal lines.
password — creates a password.
radius-server host — specifies a RADIUS server host.
tacacs-server host — specifies a TACACS+ server host.
aaa authentication login
Configure AAA Authentication method lists for user access to EXEC mode (Enable log-in).
Syntax
aaa authentication login {method-list-name | default} method
[... method4]
1162
Security
To Next Page
Loading...
