Reference Guide

Security | 1285
Defaults
Use the enable password.
Command Modes
CONFIGURATION
Command
History
Usage
Information
By default, the Enable password is used. If aaa authentication enable default is configured,
FTOS will use the methods defined for Enable access instead.
Methods configured with the aaa authentication enable command are evaluated in the order they
are configured. If authentication fails using the primary method, FTOS employs the second method (or
third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but the
server key is invalid, FTOS proceeds to the next authentication method. The TACACS+ is incorrect,
but the user is still authenticated by the secondary method.
Related
Commands
aaa authentication login
c e s
Configure AAA Authentication method lists for user access to the EXEC mode (Enable log-in).
Syntax
aaa authentication login {method-list-name | default} method [... method4]
To return to the default setting, use the no aaa authentication login {method-list-name |
default} command.
Parameters
method
Enter one of the following methods:
•
enable - use the password defined by the enable password command in
the CONFIGURATION mode.
•
line - use the password defined by the password command in the LINE
mode.
•
none - no authentication.
•
radius - use the RADIUS server(s) configured with the radius-server
host command.
•
tacacs+ - use the TACACS+ server(s) configured with the tacacs-server
host command.
... method2
(OPTIONAL) In the event of a “no response” from the first method, FTOS
applies the next configured method.
Version 7.6.1.0 Introduced for S-Series
Version 7.5.1.0 Introduced for C-Series
Version 6.2.1.1 Introduced
enable password Change the password for the enable command.
login authentication Enable AAA login authentication on terminal lines.
password Create a password.
radius-server host Specify a RADIUS server host.
tacacs-server host Specify a TACACS+ server host.
method-list-name
Enter a text string (up to 16 characters long) as the name of a user-configured
method list that can be applied to different lines.
default Enter the keyword default to specify that the method list specified is the
default method for all terminal lines.