Concept Guide
To return to the default setting, use the no aaa authentication enable {default | method-list-
name} method [... method2] command.
Parameters
default Enter the keyword default then the authentication methods to use as the default
sequence of methods for the Enable login. The default is default enable.
method-list-name Enter a text string (up to 16 characters long) to name the list of enabled authentication
methods activated at login.
method Enter one of the following methods:
• enable: use the password the enable password command denes in
CONFIGURATION mode.
• line: use the password the password command denes in LINE mode.
•
none: no authentication.
• radius: use the RADIUS servers congured with the radius-server host
command.
• tacacs+: use the TACACS+ server(s) congured with the tacacs-server host
command.
... method2 (OPTIONAL) In the event of a “no response” from the rst method, Dell Networking
Operating System (OS) applies the next congured method.
Defaults Use the enable password.
Command Modes CONFIGURATION
Supported Modes All Modes
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.4(0.0) Supported on the FN I/O Aggregator.
9.3(0.0) Supported on the M I/O Aggregator.
Usage Information
By default, the Enable password is used. If you congure aaa authentication enable default, Dell
Networking Operating System (OS) uses the methods dened for Enable access instead.
Methods congured with the aaa authentication enable command are evaluated in the order they are
congured. If authentication fails using the primary method, Dell Networking Operating System (OS) employs the
second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but
the server key is invalid, Dell Networking OS proceeds to the next authentication method. The TACACS+ is
incorrect, but the user is still authenticated by the secondary method.
Related Commands
enable password — changes the password for the enable command.
login authentication — enables AAA login authentication on the terminal lines.
radius-server host — species a RADIUS server host.
tacacs-server host — species a TACACS+ server host.
1148 Security