User's Manual

113
Users Manual of CS-6306R
Command Purpose
aaa authentication login {default | list-name}method1
[method2...]
Enables AAA globally.
line [ console | vty ] line-number [ending-line-number]
Enters line configuration mode for the lines to which
you want to apply the authentication list.
login authentication {default | list-name}
Applies the authentication list to a line or set of lines.
The list-name is a character string used to name the list you are creating. The method argument refers to the
actual method the authentication algorithm tries. The additional methods of authentication are used only if the
previous method returns an error, not if it fails. To specify that the authentication should succeed even if all
methods return an error, specify none as the final method in the command line.
For example, to specify that authentication should succeed even if (in this example) the TACACS+ server
returns an error, enter the following command:
aaa authentication login default group radius
Because the none keyword enables any user logging in to successfully
authenticate, it should be used only as a backup method of authentication.
The following table lists the supported login authentication methods.:
Keyword description
enable Uses the enable password for authentication.
group name
Uses named server group for authentication.
group radius Uses the list of all RADIUS servers for authentication.
line Uses the line password for authentication.
local Uses the local username database for authentication.
local-case Uses case-sensitive local username authentication.
none Uses no authentication.
(1) Login Authentication Using Enable Password
Use the aaa authentication login command with the enable method keyword to specify the enable password
as the login authentication method. For example, to specify the enable password as the method of user
authentication at login when no other method list has been defined, enter the following command:
aaa authentication login default enable
(2) Login Authentication Using Line Password
Use the aaa authentication login command with the line method keyword to specify the line password as the
login authentication method. For example, to specify the line password as the method of user authentication
at login when no other method list has been defined, enter the following command:
aaa authentication login default line
Before you can use a line password as the login authentication method, you need to define a line password.