Reference Guide
• none: no authentication.
• radius: use the RADIUS servers configured with the
radius-server host command.
• tacacs+: use the TACACS+ server(s) configured with the
tacacs-server host command.
... method2
(OPTIONAL) In the event of a “no response” from the first method,
FTOS applies the next configured method.
Defaults Use the enable password.
Command Modes CONFIGURATION
Command History
This guide is platform-specific. For command information about other platforms, refer to the
relevant
FTOS Command Line Reference Guide
.
The following is a list of the FTOS version history for this command.
Version 8.3.19.0 Introduced on the S4820T.
Version 8.3.11.1 Introduced on the Z9000.
Version 8.3.7.0 Introduced on the S4810.
Version 7.6.1.0 Introduced on the S-Series.
Version 7.5.1.0 Introduced on the C-Series.
Version 6.2.1.0 Introduced on the E-Series.
Usage
Information
By default, the Enable password is used. If you configure aaa authentication
enable default, FTOS uses the methods defined for Enable access instead.
Methods configured with the aaa authentication enable command are evaluated in
the order they are configured. If authentication fails using the primary method, FTOS employs
the second method (or third method, if necessary) automatically. For example, if the TACACS+
server is reachable, but the server key is invalid, FTOS proceeds to the next authentication
method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method.
Related
Commands
enable password — changes the password for the enable command.
login authentication — enables AAA login authentication on the terminal lines.
password — creates a password.
radius-server host — specifies a RADIUS server host.
tacacs-server host — specifies a TACACS+ server host.
aaa authentication login
Configure AAA Authentication method lists for user access to EXEC mode (Enable log-in).
S4820T
Syntax
aaa authentication login {method-list-name | default} method
[... method4]
To return to the default setting, use the no aaa authentication login {method-
list-name | default} command.
1202