Reference Guide

local method in authentication and authorization lists. If the user is not present in the local database,
then the next configured method is tried.
The additional methods of authentication are used only if the previous method returns an error, not if it
fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the
final method in the command line.
Use the command show authorization methods on page 69 to display information about the
authentication methods.
Note
Requests sent by the switch to a RADIUS server include the username $enabx$, where x is the
requested privilege level. For enable to be authenticated on RADIUS servers, add $enabx$
users to them. The login user ID is now sent to TACACS+ servers for enable authentication.
Default default
Format
aaa authentication enable {default | list-name} method1
[method2...]
Mode Global Config
Parameter Description
default Uses the listed authentication methods that follow this argument as the default list of
methods, when using higher privilege levels.
list-name
Character string used to name the list of authentication methods activated, when using access
higher privilege levels. Range: 1-15 characters.
method1
[method2...]
Specify at least one from the following:
•
deny: Used to deny access.
•
enable: Uses the enable password for authentication.
•
line: Uses the line password for authentication.
•
none: Uses no authentication.
•
radius: Uses the list of all RADIUS servers for authentication.
•
tacacs: Uses the list of all TACACS+ servers for authentication.
The following example sets authentication when accessing higher privilege levels:
(Extreme 220) (Config)# aaa authentication enable default enable
no aaa authentication enable
Use this command to return to the default configuration.
Format
no aaa authentication enable {default | list-name}
Mode Global Config
Management Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 66