•
•
•
•
•
•
Step Description Command Keys
10 Set the method for iterating over
authentication methods (optional).
esr(config)# aaa authentication
mode <MODE>
<MODE> – options of iterating
over methods:
chain – if the server
returned FAIL, proceed to
the following
authentication method in
the chain;
break – if the server
returned FAIL, abandon
authentication attempts.
If the server is
unavailable, continue
authentication attempts
by the following methods
in the chain.
Default value: chain.
11 Configure the list of CLI commands
accounting methods (optional).
esr(config)# aaa accounting
commands stop-only tacacs
12 Configure tacacs in the list of user
session accounting methods (optional).
esr(config)# aaa accounting login
start-stop <METHOD 1>
[ <METHOD 2> ]
<METHOD> – accounting
methods:
tacacs – session
accounting by TACACS;
radius – session
accounting by RADIUS.
13 Switch to the corresponding terminal
configuration mode.
esr(config)# line <TYPE> <TYPE> – console type:
console – local console;
ssh – secure remote
console.
14 Activate user login authentication list. esr(config-line-console)# login
authentication <NAME>
<NAME> – list name, set by the
string of up to 31 characters.
Created in step 7.
15 Activate authentication list of user
privileges elevation.
esr(config-line-console)# enable
authentication <NAME>
<NAME> – list name, set by the
string of up to 31 characters.
Created in step 8.