Configuration Guide AAA Commands
If the AAA Login authentication security service is enabled on the device, users must use AAA for
Login authentication negotiation. You must use the aaa authentication login command to configure
a default or optional method list for Login authentication.
The next method can be used for authentication only when the current method does not work.
You need to apply the configured Login authentication method to the terminal line which needs Login
authentication. Otherwise, the configured Login authentication method is invalid.
The following example defines an AAA Login authentication method list named list-1. In the
authentication method list, first the RADIUS security server is used for authentication. If the RADIUS
security server does not respond, the local user database is used for authentication.
Ruijie(config)# aaa authentication login list-1 group radius local
Enables the AAA security service.
Applies the Login authentication method to the terminal lines.
Defines a local user database.
1.9 aaa authentication web-auth
Use this command to enable AAA second-generation Web authentication and configure the
second-generation Web authentication method list in global configuration mode.
Use the no form of this command to delete the authentication method list.
aaa authentication web-auth { default | list-name } method1 [ method2...]
no aaa authentication web-auth { default | list-name }
When this parameter is used, the following defined authentication
method list is used as the default method for the
second-generation Web authentication.
Name of second-generation Web authentication method list, which
could be any character strings
It must be one of the keywords: local, none, subs and group. One
method list can contain up to four methods.
Uses the local user name database for authentication.
Does not perform authentication.
Uses the server group for authentication. At present, the RADIUS
server group is supported.
Uses the subs database for authentication.