Configuring Default Login Authentication Methods - Cisco Nexus 5000 Series Configuration Manual

Configuring Default Login Authentication Methods

SUMMARY STEPS
1. switch# configure terminal
2. switch(config)# aaa authentication login console {group group-list [none] | local | none}
3. switch(config)# exit
4. (Optional) switch# show aaa authentication
5. (Optional) switch# copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
switch# configure terminal
Step 2 switch(config)# aaa authentication
login console {group group-list [none]
| local | none}
Step 3 switch(config)# exit
Step 4 switch# show aaa authentication
Step 5
switch# copy running-config
startup-config
The following example shows how to configure authentication methods for the console login:
switch# configure terminal
switch(config)# aaa authentication login console group radius
switch(config)# exit
switch# show aaa authentication
switch# copy running-config startup-config
Configuring Default Login Authentication Methods
The authentication methods include the following:
• Global pool of RADIUS servers
• Named subset of RADIUS or TACACS+ servers
OL-20919-01
Purpose
Enters configuration mode.
Configures login authentication methods for the console.
The group-list argument consists of a space-delimited list of group names.
The group names are the following:
• radius —Uses the global pool of RADIUS servers for authentication.
• named-group —Uses a named subset of TACACS+ or RADIUS
servers for authentication.
The local method uses the local database for authentication. The none
method uses the username only.
The default console login method is local , which is used when no methods
are configured or when all of the configured methods fail to respond.
Exits configuration mode.
(Optional)
Displays the configuration of the console login authentication methods.
(Optional)
Copies the running configuration to the startup configuration.
Cisco Nexus 5000 Series NX-OS Security Configuration Guide
Configuring AAA
13