System information

12-3

Cisco SN 5428-2 Storage Router Software Configuration Guide

78-15471-01

Chapter 12 Command Line Interface Reference

aaa authentication enable

To configure authentication, authorization and accounting (AAA) authentication services for

Administrator mode access to the CLI (via the CLI enable command), use the

aaa authentication enable command. To disable this authentication, use the no form of this command.

aaa authentication enable default services1 [services2...]

no aaa authentication enable default

Syntax Description

Defaults If the default list is not configured, only the Administrator mode password is checked. This has the same

effect as the following command:

aaa authentication enable default enable

Command Modes Administrator.

Command History

Usage Guidelines Administrator mode access (“Enable”) authentication uses AAA authentication services to provide

authentication of users that request Administrator mode access to the storage router via the CLI enable

command. Because the enable command does not require you to enter a user name, the special user name

$enab15$ is used if RADIUS or TACACS+ servers are used for authentication.

AAA attempts to use each service in the order listed in the default authentication list, until authentication

succeeds or fails. If the service fails to find a user name and password match, authentication fails and

access is denied. If AAA returns an error (because the RADIUS or TACACS+ server is not available, for

example), AAA attempts to use the next service in the list for authentication. To specify that the

authentication should succeed even if all methods return an error (not if they return an authentication

failure), specify none as the final method in the command line. Use the show aaa command to display

the current authentication lists.

In a cluster environment, AAA management functions are handled by a single storage router. To

determine which storage router is performing AAA management functions, issue the show cluster

command. If you issue the aaa authentication enable command from a storage router that is not

performing AAA management functions, the CLI displays an informational message with the name of

the node that is currently handling those functions.

Note Enable authentication extends to users accessing the storage router via an FTP session. An FTP session

requires the user name admin and the password that would be entered for the CLI enable command.

default The name of the authentication list. The list name must be default.

services1 [services2...] At least one of the services described in Table 12-1.

Release Modification

3.2.1 This command was introduced.