Administrator Guide

Security Commands 863
For the same set of accounting type and list name, the administrator can
change the record type, or the methods list, without having to first delete the
previous configuration.
(Routing) #
(Routing) #configure
(Routing) #aaa accounting exec ExecList stop-only tacacs
(Routing) #aaa accounting exec ExecList start-stop tacacs
(Routing) #aaa accounting exec ExecList start-stop tacacs radius
The first aaa command creates a method list for exec sessions with the name
ExecList , with record-type as stop-only and the method as TACACS+ . The
second command changes the record type to
start-stop from stop-only for the
same method list. The third command, for the same list changes the methods
list to {
tacacs,radius } from { tacacs }.
The following shows an example of the no version of the command.
(Routing) #
(Routing) #configure
(Routing) #aaa accounting commands userCmdAudit stop-only tacacs radius
(Routing) #no aaa accounting commands userCmdAudit
(Routing) #exit
aaa authentication dot1x default
Use the aaa authentication dot1x default command in Global Configuration
mode to specify an authentication method for 802.1x clients to access
network resources. Use the no form of the command to return the
authentication method to its default settings.
Syntax
aaa authentication dot1x default {radius| ias|none}
no aaa authentication dot1x default
• radius — Uses the list of all authentication servers for authentication.
• ias — Uses the internal authentication server. Only EAP-MD5 authentication is
supported for the internal authentication server.
• none — Uses no authentication.
Default Configuration
No default authentication method is defined.
2CSNXXX_SWUM204.book Page 863 Monday, January 25, 2016 1:25 PM