ADTRAN 1000R Series Command Reference Manual page 332

Command Reference Guide
aaa authentication enable default [none | line | enable |
group <groupname> | group radius | group tacacs+]
Use the aaa authentication enable default command to create (or change) the list of fallback methods
used for privileged mode access authentication. For more detailed information on AAA functionality, refer
to the Technology Review section of the command aaa on
Syntax Description
none
line
enable
group <groupname>
group radius
group tacacs+
Default Values
If there is no default methods list configured, the default behavior is to use the enable password for the
unit. If there is no password configured, consoles are allowed access (this prevents a lock-out).
Applicable Platforms
This command applies to the NetVanta 300, 1000, 1000R, 2000, 3000, 4000, and 5000 and
Total Access 900 Series units.
Command History
Release 5.1
Release 11.
Functional Notes
A user is authenticated by trying the list of methods from first to last until a method succeeds or fails. If a
method is unable to complete, the next method is tried. The group falls through if the servers in the remote
group cannot be found.
Note that enable access is a password-only process. The local-user database cannot be used, and the
username given to any remote RADIUS server is $enab15$. The only list name allowed is default.
Usage Examples
The following example specifies using the line password as the first method for enable authentication and
using the enable password as the second:
(config)#aaa authentication enable default line enable
61200510L1-35E
Access automatically granted.
Uses the line password for authentication.
Uses the enable password for authentication.
Uses the specified group of remote servers for authentication.
Uses all defined RADIUS servers for authentication.
Uses all defined TACACS+ servers for authentication.
Command was introduced.
The group tacacs+ command was added.
Copyright © 2005 ADTRAN
Global Configuration Mode Command Set
on page 340.
332