Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - BROADBAND ACCESS CONFIGURATION GUIDE 2010-10-12 Configuration Manual page 363

aaa new-model
accounting
Copyright © 2010, Juniper Networks, Inc.
Use to set AAA authentication at login. This command creates a list that specifies the
methods of authentication.
Once you specify aaa new-model as the authentication method for vty lines, an
authentication list called "default" is automatically assigned to the vty lines. To allow
users to access the vty lines, you must create an authentication list and either:
Name the list "default."
Assign a different name to the authentication list, and assign the new list to the vty
line using the login authentication command.
The authentication methods that you can use in a list include these options: radius,
line, tacacs+, none, and enable.
The router traverses the list of authentication methods to determine whether a user
is allowed to start a Telnet session. If a specific method is available but the user
information is not valid (such as an incorrect password), the router does not continue
to traverse the list and denies the user a session.
If a specific method is unavailable, the router continues to traverse the list. For example,
if tactacs+ is the first authentication type element on the list and the TACACS+ server
is unreachable, the router attempts to authenticate with the next authentication type
on the list, such as radius.
The router assumes an implicit denial of service if it reaches the end of the
authentication list without finding an available method.
Example
host1(config)#aaa authentication login my_auth_list tacacs+ radius line none
Use the no version to remove the authentication list from your configuration.
See aaa authentication login
Use to specify AAA new model as the authentication method for the vty lines on your
router.
If you specify AAA new model and you do not create an authentication list, users will
not be able to access the router through a vty line.
Example
host1(config)#aaa new-model
Use the no version to restore simple authentication (login and password).
See aaa new-model
Chapter 9: Configuring TACACS+
325