Concept Guide

3 Assign a method-list-name or the default list to the terminal line.
LINE mode
login authentication {method-list-name | default}
To view the conguration, use the show config command in LINE mode or the show running-config in EXEC Privilege mode.
NOTE: Dell EMC Networking recommends using the none method only as a backup. This method does not authenticate users.
The none and enable methods do not work with secure shell (SSH).
You can create multiple method lists and assign them to dierent terminal lines.
Enabling AAA Authentication
To enable AAA authentication, use the following command.
• Enable AAA authentication.
CONFIGURATION mode
aaa authentication enable {method-list-name | default} method1 [... method4]
– default: uses the listed authentication methods that follow this argument as the default list of methods when a user logs in.
– method-list-name: character string used to name the list of enable authentication methods activated when a user logs in.
– method1 [... method4]: any of the following: RADIUS, TACACS, enable, line, none.
If you do not set the default list, only the local enable is checked. This setting has the same eect as issuing an aaa authentication
enable default enable
command.
Enabling AAA Authentication — RADIUS
To enable authentication from the RADIUS server, and use TACACS as a backup, use the following commands.
1 Enable RADIUS and set up TACACS as backup.
CONFIGURATION mode
aaa authentication enable default radius tacacs
2 Establish a host address and password.
CONFIGURATION mode
radius-server host x.x.x.x key some-password
3 Establish a host address and password.
CONFIGURATION mode
tacacs-server host x.x.x.x key some-password
Examples of the enable commands for RADIUS
To get enable authentication from the RADIUS server and use TACACS as a backup, issue the following commands.
The following example shows enabling authentication from the RADIUS server.
DellEMC(config)# aaa authentication enable default radius tacacs
Radius and TACACS server has to be properly setup for this.
DellEMC(config)# radius-server host x.x.x.x key <some-password>
DellEMC(config)# tacacs-server host x.x.x.x key <some-password>
To use local enable authentication on the console, while using remote authentication on VTY lines, run the following commands.
742
Security