White Papers

(OS) employs the second method (or third method, if necessary) automatically. For example, if the
TACACS+ server is reachable, but the server key is invalid, Dell Networking OS proceeds to the next
authentication method. The TACACS+ is incorrect, but the user is still authenticated by the secondary
method.
Related
Commands
enable password — changes the password for the enable command.
login authentication — enables AAA login authentication on the terminal lines.
radius-server host — specifies a RADIUS server host.
tacacs-server host — specifies a TACACS+ server host.
aaa authentication login
Configure AAA Authentication method lists for user access to EXEC mode (Enable log-in).
Syntax
aaa authentication login {method-list-name | default} method [... method4]
To return to the default setting, use the no aaa authentication login {method-list-name
| default} command.
Parameters
method-list-
name
Enter a text string (up to 16 characters long) as the name of a user-configured
method list that can be applied to different lines.
default Enter the keyword default to specify that the method list specified is the default
method for all terminal lines.
method Enter one of the following methods:
● enable: use the password the enable password command defines in
CONFIGURATION mode.
● line: use the password the password command defines in LINE mode.
● none: no authentication.
● radius: use the RADIUS servers configured with the radius-server host
command.
● tacacs+: use the TACACS+ servers configured with the tacacs-server
host command.
... method4 (OPTIONAL) Enter up to four additional methods. In the event of a “no response”
from the first method, Dell Networking Operating System (OS) applies the next
configured method (up to four configured methods).
Defaults Not configured (that is, no authentication is performed).
Command Modes CONFIGURATION
Supported Modes All Modes
Command
History
Version Description
9.11(0.0) Included a prompt to force the users to re-authenticate, when re-authentication is
enabled.
9.9(0.0) Introduced on the FN IOM.
9.4(0.0) Supported on the FN I/O Aggregator.
9.3(0.0) Supported on the M I/O Aggregator.
Usage
Information
By default, the locally configured username password is used. If you configure aaa authentication
login default, Dell Networking Operating System (OS) uses the methods this command defines for
login instead.
Methods configured with the aaa authentication login command are evaluated in the order they
are configured. If users encounter an error with the first method listed, Dell Networking Operating System
(OS) applies the next method configured. If users fail the first method listed, no other methods are
Security 1013