Reference Guide

aaa authentication enable
Configure AAA Authentication method lists for user access to EXEC privilege mode (the “Enable” access).
S5000
Syntax
aaa authentication enable {default | method-list-name} method
[... method2]
To return to the default setting, use the no aaa authentication enable
{default | method-list-name} method [... method2] command.
Parameters
default Enter the keyword default followed by the authentication
methods to use as the default sequence of methods to be
used for the Enable log-in. The default is default enable.
method-list-
name
Enter a text string (up to 16 characters long) to name the list
of enabled authentication methods activated at log in.
method Enter one of the following methods:
• enable - use the password defined by the enable
password command in CONFIGURATION mode.
• line - use the password defined by the password
command in LINE mode.
• none - no authentication.
• radius - use the RADIUS server(s) configured with the
radius-server host command.
• tacacs+ - use the TACACS+ server(s) configured with
the
tacacs-server host command.
... method2 (OPTIONAL) In the event of a “no response” from the first
method, Dell Networking OS applies the next configured
method.
Defaults Use the enable password.
Command
Modes
CONFIGURATION
Command
History
Version 9.0(1.3) Introduced on the S5000.
Usage
Information
By default, the Enable password is used. If you configure aaa authentication
enable default, Dell Networking OS uses the methods defined for Enable
access instead.
Methods configured with the aaa authentication enable command are
evaluated in the order they are configured. If authentication fails using the primary
method, Dell Networking OS employs the second method (or third method, if
necessary) automatically. For example, if the TACACS+ server is reachable, but the
server key is invalid, Dell Networking OS proceeds to the next authentication
method. The TACACS+ is incorrect, but the user is still authenticated by the
secondary method.
Security
1201