System information

12-8
Cisco SN 5428-2 Storage Router Software Configuration Guide
78-15471-01
Chapter 12 Command Line Interface Reference
aaa authentication login
aaa authentication login
To configure authentication, authorization and accounting (AAA) authentication services for Monitor
mode access to the storage router via the CLI, use the aaa authentication login command. To disable
this authentication, use the no form of this command.
aaa authentication login default services1 [services2...]
no aaa authentication login default
Syntax Description
Defaults If the default list is not configured, only the Monitor mode password is checked. This has the same effect
as the following command:
aaa authentication login default monitor
Note If the default list is not configured, you are only prompted to enter a password; you are not prompted to
enter a user name.
Command Modes Administrator.
Command History
Usage Guidelines Monitor mode access (“Login”) authentication uses AAA authentication services to provide
authentication of users that request Monitor mode access to the SN 5428-2 Storage Router via the CLI.
A user attempting Monitor mode access of the storage router via the CLI will be prompted for a user
name and password.
AAA attempts to use each service in the order listed in the default authentication list, until authentication
succeeds or fails. If the service fails to find a user name match, authentication fails. If AAA returns an
error (because the RADIUS or TACACS+ server is not available, for example), AAA attempts to use the
next service in the list for authentication. To specify that the authentication should succeed even if all
methods return an error (not if they return an authentication failure), specify none as the final method in
the command line.
If either local or local-case is the first service on the default authentication list and AAA fails to find a
user name match, AAA attempts to use the next method on the list for authentication. If the local or
local-case service is in any other position on the list and AAA fails to find a user name match,
authentication fails and access is denied. If a RADIUS or TACACS+ server fails to find a user name
match (regardless of position on the default authentication list), authentication fails and access is denied.
default The name of the authentication list. The list name must be default.
services1 [services2...] At least one of the services described in Table 12-3.
Release Modification
3.2.1 This command was introduced.