Command Reference AAA Commands
aaa new-model
Enables the AAA security service.
enable
Switches the user level.
username
Defines a local user database.
Commands
Platform
Description
N/A
aaa authentication login
Use this command to enable AAA login authentication and configure a login authentication method
list in global configuration mode.
Use the no form of this command to delete the authentication method list.
aaa authentication login { default | list-name } method1 [ method2..]
no aaa authentication login { default | list-name }
Parameter Description
default
When this parameter is used, the following defined authentication
method list is used as the default method of login authentication.
list-name
Specifies the name of a login authentication method list, which can be
any character strings.
Parameter
Description
method
It must be one of the keywords: local, none, and group. One
method list can contain up to four methods.
local
Uses the local user name database for authentication.
none
Identify authentication is not performed.
group
Uses a server group for authentication. Currently, the RADIUS and
TACACS+ server groups are supported.
Defaults
N/A
Command
Mode
Global configuration mode
Usage Guide
If the AAA login authentication security service is enabled on equipment, AAA is required for login
authentication negotiation. Use the
aaa authentication login command to configure a default or
an optional method list of login authentication.
The next method can be used for authentication only when the current method does not respond.
You must apply the configured login authentication method to the terminal line that requires login
authentication; otherwise, the configured login authentication method is ineffective.
Configuration
Examples
The following example defines an AAA login authentication method list named
list-1. In the
authentication method list, the RADIUS security server is used for authentication first. If the RADIUS
security server does not respond within the specified period of time, the local user database is used
for authentication.