Reference Guide

Configuring Login Authentication for Terminal Lines

You can use any combination of up to six authentication methods to authenticate a user on a terminal line.

A combination of authentication methods is called a method list. If the user fails the first authentication method, FTOS

prompts the next method until all methods are exhausted, at which point the connection is terminated. The available

authentication methods are:

enable

Prompt for the enable password.

line

Prompt for the password you assigned to the terminal line. Configure a password for the

terminal line to which you assign a method list that contains the line authentication method.

Configure a password using the password command from LINE mode.

local

Prompt for the system username and password.

none

Do not authenticate the user.

radius

Prompt for a username and password and use a RADIUS server to authenticate.

tacacs+

Prompt for a username and password and use a TACACS+ server to authenticate.

1. Configure an authentication method list. You may use a mnemonic name or use the keyword default. The default

authentication method for terminal lines is local and the default method list is empty.

CONFIGURATION mode

aaa authentication login {method-list-name | default} [method-1] [method-2]

[method-3] [method-4] [method-5] [method-6]

2. Apply the method list from Step 1 to a terminal line.

CONFIGURATION mode

3. If you used the line authentication method in the method list you applied to the terminal line, configure a password

for the terminal line.

LINE mode

password

In the following example, VTY lines 0-2 use a single authentication method, line.

Example of Terminal Line Authentication

FTOS(conf)#aaa authentication login myvtymethodlist line

FTOS(conf)#line vty 0 2

FTOS(config-line-vty)#login authentication myvtymethodlist

FTOS(config-line-vty)#password myvtypassword

FTOS(config-line-vty)#show config

line vty 0

password myvtypassword

line vty 1

password myvtypassword

line vty 2

password myvtypassword

FTOS(config-line-vty)#