Users Guide

Authentication and Password Commands
This section contains the commands that control the management access to the system.
aaa authentication enable
Congure AAA Authentication method lists for user access to EXEC privilege mode (the “Enable” access).
Syntax
aaa authentication enable {default | method-list-name} method [... method2]
To return to the default setting, use the no aaa authentication enable {default | method-
list-name} method [... method2] command.
Parameters
default Enter the keyword default then the authentication methods to use as the
default sequence of methods for the Enable login. The default is default
enable
.
method-list-name Enter a text string (up to 16 characters long) to name the list of enabled
authentication methods activated at login.
method Enter one of the following methods:
• enable: use the password the enable password command denes in
CONFIGURATION mode.
• line: use the password the password command denes in LINE mode.
•
none: no authentication.
• radius: use the RADIUS servers congured with the radius-server
host command.
• tacacs+: use the TACACS+ server(s) congured with the tacacs-server
host command.
... method2 (OPTIONAL) In the event of a “no response” from the rst method, Dell
Networking Operating System (OS) applies the next congured method.
Defaults Use the enable password.
Command Modes CONFIGURATION
Supported Modes All Modes
Command History
Version Description
9.4(0.0) Supported on the FN I/O Aggregator.
9.3(0.0) Supported on the M I/O Aggregator.
Usage Information
By default, the Enable password is used. If you congure aaa authentication enable
default, Dell Networking Operating System (OS) uses the methods dened for Enable access
instead.
Methods congured with the aaa authentication enable command are evaluated in the order they
are congured. If authentication fails using the primary method, Dell Networking Operating System (OS)
employs the second method (or third method, if necessary) automatically. For example, if the TACACS+
server is reachable, but the server key is invalid, Dell Networking OS proceeds to the next authentication
method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method.
Security
289