Specifications

8-28 AAA Commands
Usage
Youcanconfiguredifferentauthenticationmethodsfordifferentgroupsofusers.(Fordetails,see
“UserGlobs,MACAddressGlobs,andVLANGlobs”onpage 1‐3.)
Ifyouspecifymultipleauthenticationmethodsinthesetauthenticationconsolecommand,MSS
appliesthemintheorderinwhichtheyappearinthecommand,
withtheseresults:
•Ifthefirstmethodrespondswithpassorfail,theevaluationisfinal.
•Ifthefirstmethoddoesnotrespond,MSStriesthesecondmethod,andsoon.
•However,iflocalappearsfirst,followedbyaRADIUSservergroup,MSSignoresanyfailed
searchesinthelocalRAS
databaseandsendsanauthenticationrequesttotheRADIUSserver
group.
Example
ThefollowingcommandconfiguresadministratorJose,whoconnectsviaTelnet,for
authenticationonRADIUSservergroupsg3:
RBT-8100# set authentication admin Jose sg3
success: change accepted.
Related Commands
• clearauthenticationadminonpage 8‐4
• setauthenticationconsoleonpage 8‐29
• setauthenticationdot1xonpage 8‐31
• setauthenticationmaconpage 8‐35
• setauthenticationwebonpage 8‐38
• showaaaonpage 8‐62
Note: If a AAA rule specifies local as a secondary AAA method, to be used if the RADIUS servers
are unavailable, and MSS authenticates a client with the local method, MSS starts again at the
beginning of the method list when attempting to authorize the client. This can cause unexpected
delays during client processing and can cause the client to time out before completing logon.