56 User Account Commands
Use the command “show authorization methods” on page 59 to display
information about the authentication methods.
Requests sent by the switch to a RADIUS server include the username
$enabx$
,
where
x
is the requested privilege level. For enable to be authenticated on Radius
servers, add
$enabx$
users to them. The login user ID is now sent to TACACS+
servers for enable authentication.
The following example sets authentication when accessing higher privilege
levels.
(CN1610)(config)# aaa authentication enable default enable
Default default
Format
aaa authentication enable {default |
list-name
}
method1 [method2...]
Mode Global Config
Parameter Description
default Uses the listed authentication methods that follow
this argument as the default list of methods, when
using higher privilege levels.
list-name Character string used to name the list of
authentication methods activated, when using access
higher privilege levels. Range: 1-15 characters.
method1
[method2...]
Specify at least one from the following:
◆
deny
. Used to deny access.
◆
enable
. Uses the enable password for
authentication.
◆
line
. Uses the line password for authentication.
◆
none
. Uses no authentication.
◆
radius
. Uses the list of all RADIUS servers for
authentication.
◆
tacacs
. Uses the list of all TACACS+ servers
for authentication.