Command Reference Guide

SROS Command Line Interface Reference Guide Global Configuration Mode Command Set

aaa authentication enable default [none | line | enable | groupname]

Use the aaa authentication enable default command to create (or change) the list of methods used for

privileged mode access authentication. For more detailed information on AAA functionality, refer to the

Technology Review section of the command aaa on on page 206.

Syntax Description

none Access automatically granted.

line Use the line password.

enable Use the enable password.

groupname Use the group of remote servers. The group name radius uses all defined

RADIUS servers.

Default Values

If there is no default list configured, the default behavior is to use the enable password for the unit. If there

is no password configured, consoles are allowed in (prevents a lock-out).

Command Modes

(config)# Global Configuration Mode

Functional Notes

A user is authenticated by trying the list of methods from first to last until a method succeeds or fails. If a

method is unable to complete, the next method is tried. The group falls through if the servers in the remote

group could not be found.

Note that enable access is a password-only process. The local user database cannot be used and the

username given to any remote RADIUS server is $enab15$. The only list name allowed is default.

Usage Examples

(config)#aaa authentication enable default line