Managed Switch CLI Manual, Release 8.0.3
Management Commands 10-37
v1.0, July 2010
aaa authentication login
This command is used to set authentication at login. The default and optional list names
that you create with the
aaa authentication login command are used with the login
authentication command. Create a list by entering the aaa authentication login
list-name method command for a particular protocol, where list-name is any character
string used to name this list. The
method argument identifies the list of methods that the
authentication algorithm tries, in the given sequence. The additional methods of
authentication are used only if the previous method returns an error, not if it fails. To
ensure that the authentication succeeds even if all methods return an error, specify
none as
the final method in the command line. For example if
none is specified as an
authentication method after
radius, no authentication is used if the radius server is down.
where:
Default Uses the listed authentication methods that follow this argument as the default
list of methods when a user logs in.
list-name Character string used to name the list of authentication methods activated when
a user logs in. Up to 12 characters.
method1 [method2…] At least one from the following table:
Format aaa authentication login {default | list-name} method1 [method2...]
Mode Global Config
Keyword Description
enable Uses the enable password for authentication.
line Uses the line password for authentication.
local Uses the local username database for authentication.
none Uses no authentication.
radius Uses the list of all RADIUS servers for authentication.
tacacs Uses the list of all TACACS servers for authentication.
Note: The local user database is checked. This has the same effect as the following
command:
aaa authentication login local