Alcatel OS-LS-6224 User Manual page 318

4
Command Line Interface
Parameters
• default — Uses the listed authentication methods that follow this argument
as the default list of methods when a user logs in.
• list-name — Character string used to name the list of authentication
methods activated when a user logs in. (Range: 1-12 characters).
• method1 [method2...] — Specify at least one from the following table:
Keyword
enable
line
local
none
radius
tacacs
Default Setting
The local user database is checked. This has the same effect as the command
aaa authentication login list-name local.
Note: On the console, login succeeds without any authentication check if the
authentication method is not defined.
Command Mode
Global Configuration mode
Command Usage
The default and optional list names created with the aaa authentication login
command are used with the login authentication command.
Create a list by entering the aaa authentication login list-name method
command for a particular protocol, where list-name is any character string
used to name this list. The method argument identifies the list of methods that
the authentication algorithm tries, in the given sequence.
The additional methods of authentication are used only if the previous method
returns an error, not if it fails. To ensure that the authentication succeeds even
if all methods return an error, specify none as the final method in the
command line.
Example
The following example configures the authentication login.
Console(config)# aaa authentication login default radius local enable none
294
Description
Uses the enable password for authentication.
Uses the line password for authentication.
Uses the local username database for authentication.
Uses no authentication.
Uses the list of all RADIUS servers for authentication.
Uses the list of all TACACS+ servers for authentication.