Aaa Authentication Enable - NETGEAR M6100 Series Reference Manual

The additional methods of authentication are used only if the previous method returns an
error, not if there is an authentication failure. To ensure that the authentication succeeds
even if all methods return an error, specify none as the fInal method in the command line.
For example, if none is specified as an authentication method after radius, no
authentication is used if the RADIUS server is down.
Default • defaultList. Used by the console and only contains the method none.
• networkList. Used by telnet and SSH and only contains the method local.
Format
aaa authentication login {default | list-name} method1 [method2...]
Mode Global Config
Parameter Definition
default Uses the listed authentication methods that follow this argument as the default list of methods when
a user logs in.
list-name Character string of up to 15 characters used to name the list of authentication methods activated
when a user logs in.
method1... At least one from the following:
[method2...]
• enable. Uses the enable password for authentication.
• line. Uses the line password for authentication.
• local. Uses the local username database for authentication.
• none. Uses no authentication.
• radius. Uses the list of all RADIUS servers for authentication.
• tacacs. Uses the list of all TACACS servers for authentication.
Command example:
(NETGEAR Switch)(config)# aaa authentication login default radius local enable none
no aaa authentication login
This command returns to the default.
Format
aaa authentication login {default | list-name}
Mode Global Config

aaa authentication enable

Use this command to set authentication for accessing higher privilege levels. The default
enable list is enableList. It is used by console, and contains the method as enable
followed by none.
A separate default enable list, enableNetList, is used for Telnet and SSH users instead of
enableList. This list is applied by default for Telnet and SSH, and contains enable
followed by deny methods. In NETGEAR Managed Switch, by default, the enable password
is not configured. That means that, by default, Telnet and SSH users will not get access to
M6100 Series Switches
Management Commands
78