Specifications

aaa authentication login
21
aaa authentication login
Sets one or more authentication methods to be used for remote login. If the first specified
method fails, the second specified method is used. You can change how authentication
works when the first method failed by using the
aaa authentication login
end-by-reject command.
Syntax
To set or change information:
aaa authentication login default <Method> [<Method>]
To delete information:
no aaa authentication login
Input mode
(config)
Parameters
default <Method> [<Method>]
Specify the following parameters for <Method>. You cannot specify the same
<Method> more than once.
group radius
RADIUS authentication is used.
General-purpose RADIUS servers are used.
local
Local password authentication is used.
group group-name
RADIUS authentication is used.
The RADIUS server to use is a RADIUS server group. Specify the group name
set by the
aaa group server radius command.
However, you cannot use the following character strings:
radius or a character string beginning with radius
tacacs+ or a character string beginning with tacacs+
Default behavior
Local password authentication is performed.
Impact on communication
None
When the change is applied
The change is applied immediately after setting values are changed.
Notes
1. If group radius or group <Group name> is specified for the authentication method,
communication failure with the RADIUS server or authentication failure at the
RADIUS server disables login to the Switch. Therefore, we recommend that you
specify local password authentication at the same time.