Management Commands
531
ProSAFE M7100 Managed Switches
• default. Uses the listed authentication methods that follow this argument as the default list
of methods when a user accesses a higher privilege level.
• <list-name>. Charac
ter string used to name the list of authentication methods activated
when a user accesses a higher privilege level. The name can be up to 12 characters.
• <method1> [<method2> …]. At le
ast one keyword from the following table:
Note: If the default list is not set, only the enable password is checked. This
has the same effect as the aaa authentication enable
default enable command.
On the console, the enable password is used if it exists. If no password
is se
t
, the process succeeds anyway. This has the same effect as the
aaa authentication enable default enable none
command.
no aaa authentication enable
Use this command to remove the authentication method.
aaa authentication dot1x
Use this command to set authentication for dot1x users. The method argument identifies the list
of methods that the authentication algorithm tries, in the given sequence. The additional methods
of authentication are used only if the previous method returns an error, not if there is an
authentication failure. To ensure that the authentication succeeds even if all methods return an
error, specify none as the final method in the command line. For example if none is specified as
an authentication method after radius, no authentication is used if the RADIUS server is down.
Keyword Description
deny Use to deny access.
enable Uses the enable password for authentication.
line Uses the line password for authentication.
none Uses no authentication.
radius Uses the list of all RADIUS servers for authentication. Uses user name
"$enab
x$."wher
e x is the privilege level.
tacacs Uses the list of all TACACS servers for authentication. Uses username "$enabx$."
where x is the privilege lev
el.
Format no aaa authentication enable {default | <list-name>} <method1>
[<method2> ...]
Mode Global Config