Reference Guide

Configure Login Authentication for Terminal Lines
You can assign up to five authentication methods to a method list. FTOS evaluates the methods in the order in which you
enter them in each list.
If the first method list does not respond or returns an error, FTOS applies the next method list until the user either passes
or fails the authentication. If the user fails a method list, FTOS does not apply the next method list.
Configuring AAA Authentication Login Methods
To configure an authentication method and method list, use the following commands.
FTOS Behavior: If you use a method list on the console port in which RADIUS or TACACS is the last authentication
method, and the server is not reachable, FTOS allows access even though the username and password credentials
cannot be verified. Only the console port behaves this way, and does so to ensure that users are not locked out of the
system if network-wide issue prevents access to these servers.
1. Define an authentication method-list (method-list-name) or specify the default.
CONFIGURATION mode
aaa authentication login {method-list-name | default} method1 [... method4]
The default method-list is applied to all terminal lines.
Possible methods are:
– enable: use the password you defined using the enable secret or enable password command
in CONFIGURATION mode.
– line: use the password you defined using the password command in LINE mode.
– local: use the username/password database defined in the local configuration.
– none: no authentication.
– radius: use the RADIUS servers configured with the radius-server host command.
– tacacs+: use the TACACS+ servers configured with the tacacs-server host command.
2. Enter LINE mode.
CONFIGURATION mode
line {aux 0 | console 0 | vty number [... end-number]}
3. Assign a method-list-name or the default list to the terminal line.
LINE mode
login authentication {method-list-name | default}
To view the configuration, use the show config command in LINE mode or the show running-config in EXEC
Privilege mode.
NOTE: Dell Networking recommends using the none method only as a backup. This method does not authenticate
users. The
none and enable methods do not work with secure shell (SSH).
You can create multiple method lists and assign them to different terminal lines.
Enabling AAA Authentication
To enable AAA authentication, use the following command.
• Enable AAA authentication.
CONFIGURATION mode
aaa authentication enable {method-list-name | default} method1 [... method4]
– default: uses the listed authentication methods that follow this argument as the default list of methods
when a user logs in.
692