Aaa Authentication Login Default - Cisco Nexus 5500 Series Command Reference Manual

Chapter A Commands

aaa authentication login default

To configure the default authentication, authorization, and accounting (AAA) authentication methods,
use the aaa authentication login default command. To revert to the default, use the no form of this
command.
Syntax Description
group
group-list
none
local
Command Default The local database
Command Modes
Global configuration mode
Command History Release
5.2(1)N1(1)
Usage Guidelines
The group radius, group tacacs+, and group group-list methods refer to a set of previously defined
RADIUS or TACACS+ servers. Use the radius-server host or tacacs-server host command to
configure the host servers. Use the aaa group server command to create a named group of servers.
If you specify the group method or local method and they fail, then the authentication fails. If you
specify the none method alone or after the group method, then the authentication always succeeds.
Examples This example shows how to configure the AAA authentication console login method:
switch(config)# aaa authentication login default group radius
This example shows how to revert to the default AAA authentication console login method:
switch(config)# no aaa authentication login default group radius
OL-27883-02
aaa authentication login default {group group-list} [none] | local | none}
no aaa authentication login default {group group-list} [none] | local | none}
Specifies that a server group be used for authentication.
Space-separated list of RADIUS or TACACS+ server groups that can include
the following:
•
•
•
(Optional) Specifies that the username be used for authentication.
(Optional) Specifies that the local database be used for authentication.
Modification
This command was introduced.
radius for all configured RADIUS servers.
tacacs+ for all configured TACACS+ servers.
Any configured RADIUS or TACACS+ server group name.
Cisco Nexus 5500 Series NX-OS Security Command Reference
aaa authentication login default
5