Deployment Guide

Authentication and Password Commands
This section contains the commands that control the management access to the system.
aaa authentication enable
Congure AAA Authentication method lists for user access to EXEC privilege mode (the “Enable” access).
Syntax
aaa authentication enable {default | method-list-name} method [... method2]
To return to the default setting, use the no aaa authentication enable {default | method-list-
name} method [... method2] command.
Parameters
default Enter the keyword default then the authentication methods to use as the default
sequence of methods for the Enable login. The default is default enable.
method-list-name Enter a text string (up to 16 characters long) to name the list of enabled authentication
methods activated at login.
method Enter one of the following methods:
• enable: use the password the enable password command denes in
CONFIGURATION mode.
• line: use the password the password command denes in LINE mode.
•
none: no authentication.
• radius: use the RADIUS servers congured with the radius-server host
command.
• tacacs+: use the TACACS+ server(s) congured with the tacacs-server host
command.
... method2 (OPTIONAL) In the event of a “no response” from the rst method, Dell Networking
Operating System (OS) applies the next congured method.
Defaults Use the enable password.
Command Modes CONFIGURATION
Supported Modes All Modes
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.4(0.0) Supported on the FN I/O Aggregator.
9.3(0.0) Supported on the M I/O Aggregator.
Usage Information
By default, the Enable password is used. If you congure aaa authentication enable default, Dell
Networking Operating System (OS) uses the methods dened for Enable access instead.
Methods congured with the aaa authentication enable command are evaluated in the order they are
congured. If authentication fails using the primary method, Dell Networking Operating System (OS) employs the
second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but
Security 1131