Reference Guide

Table Of Contents

(Extreme 220) (Config) # aaa authentication login default radius local enable none

no aaa authentication login

This command returns authentication login to the default.

Format aaa authentication login {default | list-name}

Mode Global Conﬁg

aaa authentication enable

Use this command to set authentication for accessing higher privilege levels. The default enable list is

enableList. It is used by console, and contains the method as enable followed by none.

A separate default enable list, enableNetList, is used for Telnet and SSH users instead of enableList. This

list is applied by default for Telnet and SSH, and contains enable followed by deny methods. In 200

Series, by default, the enable password is not conﬁgured. That means that, by default, Telnet and SSH

users will not get access to Privileged EXEC mode. On the other hand, with default conditions, a console

user always enters the Privileged EXEC mode without entering the enable password.

The default and optional list names created with the aaa authentication enable command are

used with the enable authentication command. Create a list by entering the aaa

authentication enable list-name method command where list-name is any character

string used to name this list. The method argument identiﬁes the list of methods that the authentication

algorithm tries in the given sequence.

The user manager returns ERROR (not PASS or FAIL) for enable and line methods if no password is

conﬁgured, and moves to the next conﬁgured method in the authentication list. The method none

reﬂects that there is no authentication needed.

The user will only be prompted for an enable password if one is required. The following authentication

methods do not require passwords:

1 none

2 deny

3 enable (if no enable password is conﬁgured)

4 line (if no line password is conﬁgured)

See the following examples:

aaa authentication enable default enable none

aaa authentication enable default line none

aaa authentication enable default enable radius none

aaa authentication enable default line tacacs none

Examples 1 and 2 do not prompt for a password, however because examples 3 and 4 contain the radius

and tacacs methods, the password prompt is displayed.

If the login methods include only enable, and there is no enable password conﬁgured, you are not

prompted for a username – only for a password. 200 Series supports conﬁguring methods after the

Management Commands

ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 65