HP ProCurve 7102dl Reference Manual page 314

SROS Command Line Interface Reference Guide
aaa authentication enable default
Use the aaa authentication enable default command to create (or change) the list of fallback methods
used for privileged mode access authentication. For more detailed information on AAA functionality, refer
to the Technology Review section of the command aaa on on page 321. Variations of this command
include:
aaa authentication enable default enable
aaa authentication enable default group radius
aaa authentication enable default group radius enable
aaa authentication enable default group tacacs+
aaa authentication enable default group tacacs+ enable
aaa authentication enable default group <name>
aaa authentication enable default group <name> enable
aaa authentication enable default line
aaa authentication enable default line enable
aaa authentication enable default none
aaa authentication enable default none enable
Syntax Description
none
line
enable
group <groupname>
group radius
group tacacs+
Default Values
If there is no default methods list configured, the default behavior is to use the enable password for the
unit. If there is no password configured, consoles are allowed access (this prevents a lock-out).
Functional Notes
A user is authenticated by trying the list of methods from first to last until authentication succeeds or fails. If
a method does not succeed or fail, the next method is tried. The group methods will fail if the servers in the
remote group cannot be found. Refer to the command
529 for information on defining server groups.
Note
Access to the Enable command set is a password-only process. The local-user database
cannot be used, and the user name given to any remote RADIUS server is $enab15$. The
only list name allowed is default.
5991-2114
Access automatically granted.
Uses the line password for authentication.
Uses the enable password for authentication.
Uses the specified group of remote servers for authentication.
Uses all defined RADIUS servers for authentication.
Uses all defined TACACS+ servers for authentication.
© Copyright 2007 Hewlett-Packard Development Company, L.P.
Global Configuration Mode Command Set
radius-server
on page 487 or
tacacs-server
on page
312