Users Guide

• none: no authentication.
• radius: use the RADIUS servers congured with the radius-server host command.
• tacacs+: use the TACACS+ servers congured with the tacacs-server host command.
2. Enter LINE mode.
CONFIGURATION mode
line {aux 0 | console 0 | vty number [... end-number]}
3. Assign a method-list-name or the default list to the terminal line.
LINE mode
login authentication {method-list-name | default}
To view the conguration, use the show config command in LINE mode or the show running-config in EXEC Privilege
mode.
NOTE: Dell Networking recommends using the none method only as a backup. This method does not authenticate users.
The none and enable methods do not work with secure shell (SSH).
You can create multiple method lists and assign them to dierent terminal lines.
Enabling AAA Authentication
To enable AAA authentication, use the following command.
• Enable AAA authentication.
CONFIGURATION mode
aaa authentication enable {method-list-name | default} method1 [... method4]
– default: uses the listed authentication methods that follow this argument as the default list of methods when a user logs
in.
– method-list-name: character string used to name the list of enable authentication methods activated when a user logs
in.
– method1 [... method4]: any of the following: RADIUS, TACACS, enable, line, none.
If you do not set the default list, only the local enable is checked. This setting has the same eect as issuing an aaa
authentication enable default enable
command.
Enabling AAA Authentication — RADIUS
To enable authentication from the RADIUS server, and use TACACS as a backup, use the following commands.
1. Enable RADIUS and set up TACACS as backup.
CONFIGURATION mode
aaa authentication enable default radius tacacs
2. Establish a host address and password.
CONFIGURATION mode
radius-server host x.x.x.x key some-password
3. Establish a host address and password.
CONFIGURATION mode
tacacs-server host x.x.x.x key some-password
To get enable authentication from the RADIUS server and use TACACS as a backup, issue the following commands.
170
Security