Authentication, Authorization and Accounting (AAA) Commands
15
Authentication, Authorization and Accounting (AAA)
Commands
78-20269-01 Command Line Interface Reference Guide
15.1
aaa authentication login
The aaa authentication login Global Configuration mode command sets one or
more authentication methods to be applied during login. The list of authentication
methods may be assigned a list name, and this list name can be used in
authentication login
and
command to restore the default authentication method.
Syntax
aaa authentication login
aaa authentication login
no aaa authentication login
Parameters
•
default—Uses the authentication methods that follow this argument as the
default method list when a user logs in.
•
list-name—Specifies a name of a list of authentication methods activated
when a user logs in. (Length: 1–12 characters)
•
method1 [method2...]—Specifies a list of methods that the authentication
algorithm tries (in the given sequence). The additional authentication
methods are used only if the previous method returns an error, not if it fails.
To ensure that the authentication succeeds even if all methods return an
error, specify none as the final method in the command line. Select one or
more methods from the following list:
Keyword
Description
enable
Uses the enable password for authentication.
line
Uses the line password for authentication.
local
Uses the local username database for authentication.
none
Uses no authentication.
radius
Uses the list of all RADIUS servers for authentication.
tacacs
Uses the list of all TACACS+ servers for
authentication.
aaa authentication
enable. Use the no form of this
{default | list-name
method1
}
list-name method1 method2...
{default | list-name
:
method2
[
...]
}
15
aaa
188